{"id":"CVE-2026-31557","aliases":["AZL-83630","BELL-CVE-2026-31557","CLSA-2026-1789986443","DEBIAN-CVE-2026-31557","EUVD-2026-25450","GHSA-7v44-fgx9-96v6","OESA-2026-2869","OESA-2026-3157","ROOT-OS-DEBIAN-12-CVE-2026-31557","ROOT-OS-UBUNTU-2204-CVE-2026-31557","ROOT-OS-UBUNTU-2404-CVE-2026-31557","SUSE-SU-2026:23066-1","SUSE-SU-2026:23068-1","SUSE-SU-2026:23221-1","SUSE-SU-2026:23231-1","SUSE-SU-2026:23237-1","SUSE-SU-2026:23477-1","SUSE-SU-2026:23481-1","SUSE-SU-2026:23528-1","SUSE-SU-2026:23529-1","SUSE-SU-2026:4120-1","SUSE-SU-2026:4254-1","UBUNTU-CVE-2026-31557","USN-8567-1","USN-8574-1","USN-8574-2","USN-8574-3","USN-8595-1","USN-8595-2","USN-8595-3","USN-8596-1","USN-8606-1","USN-8607-1","USN-8608-1","USN-8609-1","USN-8619-1","USN-8665-1","openSUSE-SU-2026:21555-1"],"status":"published","title":"nvmet: move async event work off nvmet-wq","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026queue-\u003erelease_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u003c--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026ctrl-\u003easync_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u003c--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00451,"percentile":0.3953,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-667"],"published":"2026-04-24T14:35:40Z","modified":"2026-11-11T09:39:36Z","fixes":[{"ecosystem":"Alpaquita:23","package":"linux-lts","fixed_in":["6.1.191-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"linux-lts","fixed_in":["6.12.80-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-lts","fixed_in":["6.18.35-r1"],"sources":["osv"]},{"ecosystem":"Linux","package":"Kernel","fixed_in":["6.1.191","6.6.160","6.12.80","6.18.21","6.19.11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.12.85-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["6.19.11-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"linux","fixed_in":["6.1.190-1.aikido.167"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-linux","fixed_in":["6.1.190-1.aikido.167"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"linux","fixed_in":["5.15.0-203.213.aikido.119"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"rootio-linux","fixed_in":["5.15.0-203.213.aikido.119"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:24.04","package":"linux","fixed_in":["6.8.0-149.149.aikido.91"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:24.04","package":"rootio-linux","fixed_in":["6.8.0-149.149.aikido.91"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","fixed_in":["6.8.0-1061.64~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","fixed_in":["6.8.0-1063.71~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.8","fixed_in":["6.8.0-1062.69~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","fixed_in":["6.8.0-1064.72~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","fixed_in":["6.8.0-136.136~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm-6.8","fixed_in":["6.8.0-1061.62~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","fixed_in":["6.8.0-136.136.2~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","fixed_in":["6.8.0-1059.62~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","fixed_in":["6.8.0-1058.61~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","fixed_in":["6.8.0-136.136~22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime-6.8","fixed_in":["6.8.1-1056.57~22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux","fixed_in":["6.8.0-136.136"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","fixed_in":["6.8.0-1061.64"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","fixed_in":["6.8.0-1063.71"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","fixed_in":["6.8.0-1062.69"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","fixed_in":["6.8.0-1064.72"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","fixed_in":["6.8.0-1059.67"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","fixed_in":["6.8.0-1046.50"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","fixed_in":["6.8.0-1061.62"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","fixed_in":["6.8.0-136.136.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","fixed_in":["6.8.0-1059.62"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","fixed_in":["6.8.0-1059.62.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","fixed_in":["6.8.0-1030.31"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","fixed_in":["6.8.0-1058.61"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","fixed_in":["6.8.0-1061.65"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-vmware","fixed_in":["6.8.0-1008.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-xilinx","fixed_in":["6.8.0-1033.34"],"sources":["osv"]},{"ecosystem":"Ubuntu:Nvidia-BlueField:24.04:LTS","package":"linux-bluefield","fixed_in":["6.8.0-1028.33"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","fixed_in":["6.8.0-2050.52"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","fixed_in":["6.8.1-1056.57"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","fixed_in":["6.8.0-1061.64+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","fixed_in":["6.8.0-1063.71+fips2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","fixed_in":["6.8.0-136.136+fips2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","fixed_in":["6.8.0-1064.72+fips1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.161.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.189-r0"},{"fixed":"6.1.191-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.74-r0"},{"fixed":"6.12.80-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.92-r1"},{"fixed":"6.18.35-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-debug-uki-virt-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-rt-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"kernel-uki-virt-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libperf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-570.62.1.el9_6.tuxcare.5.els14"}]}],"bundled":121},{"source":"osv","ecosystem":"Linux","package":"Kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.18.0"},{"fixed":"6.1.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.80"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.21"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"6.19.11"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.123-1","6.1.124-1","6.1.128-1","6.1.129-1","6.1.133-1","6.1.135-1","6.1.137-1","6.1.139-1","6.1.140-1","6.1.147-1","6.1.148-1","6.1.153-1","6.1.158-1","6.1.159-1","6.1.162-1","6.1.164-1","6.1.170-1","6.1.170-2","6.1.170-3","6.1.172-1","6.1.174-1","6.1.176-1","6.1.177-1","6.1.180-1","6.1.187-1","6.1.190-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1","6.10-1~exp1","6.10.1-1~exp1","6.10.11-1","6.10.11-1~bpo12+1","6.10.12-1","6.10.3-1","6.10.4-1","6.10.6-1","6.10.6-1~bpo12+1","6.10.7-1","6.10.9-1","6.11-1~exp1","6.11.10-1","6.11.10-1~bpo12+1","6.11.2-1","6.11.4-1","6.11.5-1","6.11.5-1~bpo12+1","6.11.6-1","6.11.7-1","6.11.9-1","6.11~rc4-1~exp1","6.11~rc5-1~exp1","6.12.10-1","6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.11-1","6.12.11-1+alpha","6.12.11-1+alpha.1","6.12.111-1","6.12.113-1","6.12.12-1","6.12.12-1~bpo12+1","6.12.13-1","6.12.15-1","6.12.16-1","6.12.17-1","6.12.19-1","6.12.20-1","6.12.21-1","6.12.22-1","6.12.22-1~bpo12+1","6.12.25-1","6.12.27-1","6.12.27-1~bpo12+1","6.12.29-1","6.12.3-1","6.12.30-1","6.12.30-1~bpo12+1","6.12.31-1","6.12.32-1","6.12.32-1~bpo12+1","6.12.33-1","6.12.33-1~bpo12+1","6.12.35-1","6.12.35-1~bpo12+1","6.12.37-1","6.12.38-1","6.12.38-1~bpo12+1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.5-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.6-1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.8-1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.9-1","6.12.9-1+alpha","6.12.9-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1","6.12~rc6-1~exp1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.10-1","6.16.11-1","6.16.12-1","6.16.12-1~bpo13+1","6.16.12-2","6.16.3-1","6.16.3-1~bpo13+1","6.16.5-1","6.16.6-1","6.16.7-1","6.16.8-1","6.16.9-1","6.16~rc7-1~exp1","6.17.10-1","6.17.11-1","6.17.12-1","6.17.13-1","6.17.13-1~bpo13+1","6.17.2-1~exp1","6.17.5-1~exp1","6.17.6-1","6.17.7-1","6.17.7-2","6.17.8-1","6.17.8-1~bpo13+1","6.17.9-1","6.18.1-1~exp1","6.18.10-1","6.18.12-1","6.18.12-1~bpo13+1","6.18.13-1","6.18.14-1","6.18.15-1","6.18.15-1~bpo13+1","6.18.2-1~exp1","6.18.3-1","6.18.5-1","6.18.5-1~bpo13+1","6.18.8-1","6.18.9-1","6.18.9-1~bpo13+1","6.18~rc4-1~exp1","6.18~rc4-1~exp2","6.18~rc5-1~exp1","6.18~rc6-1~exp1","6.18~rc7-1~exp1","6.19-1~exp1","6.19.10-1","6.19.10-1~bpo13+1","6.19.11-1","6.19.11-1~bpo13+1","6.19.12-1","6.19.13-1","6.19.13-1~bpo13+1","6.19.14-1","6.19.14-1~bpo13+1","6.19.2-1~exp1","6.19.3-1~exp1","6.19.4-1~exp1","6.19.5-1~exp1","6.19.6-1","6.19.6-2","6.19.6-2~bpo13+1","6.19.8-1","6.19.8-1~bpo13+1","6.19~rc4-1~exp1","6.19~rc5-1~exp1","6.19~rc6-1~exp1","6.19~rc7-1~exp1","6.19~rc8-1~exp1","6.3.1-1~exp1","6.3.11-1","6.3.2-1~exp1","6.3.4-1~exp1","6.3.5-1~exp1","6.3.7-1","6.3.7-1~bpo12+1","6.4.1-1~exp1","6.4.11-1","6.4.13-1","6.4.4-1","6.4.4-1~bpo12+1","6.4.4-2","6.4.4-3","6.4.4-3~bpo12+1","6.4~rc6-1~exp1","6.4~rc7-1~exp1","6.5.1-1~exp1","6.5.10-1","6.5.10-1~bpo12+1","6.5.13-1","6.5.3-1","6.5.3-1~bpo12+1","6.5.6-1","6.5.8-1","6.5~rc4-1~exp1","6.5~rc6-1~exp1","6.5~rc7-1~exp1","6.6.11-1","6.6.13-1","6.6.13-1~bpo12+1","6.6.15-1","6.6.15-2","6.6.3-1~exp1","6.6.4-1~exp1","6.6.7-1~exp1","6.6.8-1","6.6.9-1","6.7-1~exp1","6.7.1-1~exp1","6.7.12-1","6.7.12-1~bpo12+1","6.7.4-1~exp1","6.7.7-1","6.7.9-1","6.7.9-2","6.8.11-1","6.8.12-1","6.8.12-1~bpo12+1","6.8.9-1","6.9.10-1","6.9.10-1~bpo12+1","6.9.11-1","6.9.12-1","6.9.2-1~exp1","6.9.7-1","6.9.7-1~bpo12+1","6.9.8-1","6.9.9-1","7.0-1~exp1","7.0.1-1~exp1","7.0.10-1","7.0.10-1~bpo13+1","7.0.12-1","7.0.12-2","7.0.12-2~bpo13+1","7.0.13-1","7.0.13-1~bpo13+1","7.0.14-1","7.0.3-1","7.0.4-1","7.0.4-1~bpo13+1","7.0.7-1","7.0.7-1~bpo13+1","7.0.9-1","7.0.9-1~bpo13+1","7.1.1-1~exp1","7.1.10-1","7.1.12-1","7.1.13-1","7.1.13-1~bpo13+1","7.1.2-1~exp1","7.1.3-1","7.1.3-1+sunvdc","7.1.3-1~bpo13+1","7.1.4-1","7.1.5-1","7.1.6-1","7.1.7-1","7.1.7-1~bpo13+1","7.1.8-1","7.1.8-1~bpo13+1","7.1.8-2","7.1.9-1","7.1.9-1+sparc64","7.1~rc2-1~exp1","7.1~rc3-1~exp1","7.1~rc4-1~exp1","7.1~rc4-1~exp2","7.1~rc5-1~exp1","7.1~rc7-1~exp1","7.2.10-1","7.2.11-1","7.2.11-1~bpo13+1","7.2.12-1","7.2.13-1","7.2.14-1","7.2.2-1~exp1","7.2.3-1~exp1","7.2.6-1","7.2.6-1~bpo13+1","7.2.7-1","7.2.8-1","7.2.9-1","7.2.9-1~bpo13+1","7.2~rc3-1~exp1","7.2~rc5-1~exp1","7.2~rc7-1~exp1","7.3~rc6-1~exp1","7.3~rc7-1~exp1"]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.85-1"}]}],"versions":["6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.19.11-1"}]}],"versions":["6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.111-1","6.12.113-1","6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.10-1","6.16.11-1","6.16.12-1","6.16.12-1~bpo13+1","6.16.12-2","6.16.3-1","6.16.3-1~bpo13+1","6.16.5-1","6.16.6-1","6.16.7-1","6.16.8-1","6.16.9-1","6.16~rc7-1~exp1","6.17.10-1","6.17.11-1","6.17.12-1","6.17.13-1","6.17.13-1~bpo13+1","6.17.2-1~exp1","6.17.5-1~exp1","6.17.6-1","6.17.7-1","6.17.7-2","6.17.8-1","6.17.8-1~bpo13+1","6.17.9-1","6.18.1-1~exp1","6.18.10-1","6.18.12-1","6.18.12-1~bpo13+1","6.18.13-1","6.18.14-1","6.18.15-1","6.18.15-1~bpo13+1","6.18.2-1~exp1","6.18.3-1","6.18.5-1","6.18.5-1~bpo13+1","6.18.8-1","6.18.9-1","6.18.9-1~bpo13+1","6.18~rc4-1~exp1","6.18~rc4-1~exp2","6.18~rc5-1~exp1","6.18~rc6-1~exp1","6.18~rc7-1~exp1","6.19-1~exp1","6.19.10-1","6.19.10-1~bpo13+1","6.19.11-1~bpo13+1","6.19.2-1~exp1","6.19.3-1~exp1","6.19.4-1~exp1","6.19.5-1~exp1","6.19.6-1","6.19.6-2","6.19.6-2~bpo13+1","6.19.8-1","6.19.8-1~bpo13+1","6.19~rc4-1~exp1","6.19~rc5-1~exp1","6.19~rc6-1~exp1","6.19~rc7-1~exp1","6.19~rc8-1~exp1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-145.3.17.150.oe2403sp3"}]}],"bundled":45},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-145.1.19.156.oe2403sp1"}]}],"bundled":83},{"source":"osv","ecosystem":"Root:Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.190-1.aikido.167"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.190-1.aikido.167"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-203.213.aikido.119"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"rootio-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-203.213.aikido.119"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:24.04","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-149.149.aikido.91"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:24.04","package":"rootio-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-149.149.aikido.91"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1.160000.2.19"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1.160000.2.19"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1.160000.2.19"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1.160000.2.19"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1.160000.2.19"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1.21.36"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1.21.34"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7-RT_Update_20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.1.3.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.75.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.75.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.75.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1.150700.17.45.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7_Update_21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.15.3.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1","5.15.0-1040.45~20.04.1","5.15.0-1041.46~20.04.1","5.15.0-1043.48~20.04.1","5.15.0-1044.49~20.04.1","5.15.0-1045.50~20.04.1","5.15.0-1047.52~20.04.1","5.15.0-1048.53~20.04.1","5.15.0-1049.54~20.04.1","5.15.0-1050.55~20.04.1","5.15.0-1051.56~20.04.1","5.15.0-1052.57~20.04.1","5.15.0-1053.58~20.04.1","5.15.0-1055.60~20.04.1","5.15.0-1056.61~20.04.1","5.15.0-1057.63~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1075.82~20.04.1","5.15.0-1077.84~20.04.1","5.15.0-1080.87~20.04.1","5.15.0-1081.88~20.04.1","5.15.0-1082.89~20.04.1","5.15.0-1083.90~20.04.1","5.15.0-1084.91~20.04.1","5.15.0-1086.93~20.04.1","5.15.0-1087.94~20.04.1","5.15.0-1088.95~20.04.1","5.15.0-1089.96~20.04.1","5.15.0-1090.97~20.04.1","5.15.0-1091.98~20.04.1","5.15.0-1092.99~20.04.1","5.15.0-1093.100~20.04.1","5.15.0-1095.102~20.04.1","5.15.0-1096.103~20.04.1","5.15.0-1097.104~20.04.1","5.15.0-1098.105~20.04.1","5.15.0-1099.106~20.04.1","5.15.0-1100.107~20.04.2","5.15.0-1101.108~20.04.1","5.15.0-1103.110~20.04.1","5.15.0-1104.111~20.04.1","5.15.0-1105.112~20.04.1","5.15.0-1106.113~20.04.1","5.15.0-1108.115~20.04.1","5.15.0-1109.116~20.04.1","5.15.0-1111.118~20.04.1","5.15.0-1112.119~20.04.1","5.15.0-1114.121~20.04.1","5.15.0-1115.122~20.04.1","5.15.0-1116.123~20.04.1","5.15.0-1117.124~20.04.1","5.15.0-1119.126~20.04.1","5.15.0-1120.127~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1","5.15.0-1042.49~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1056.64~20.04.1","5.15.0-1057.65~20.04.1","5.15.0-1058.66~20.04.2","5.15.0-1059.67~20.04.1","5.15.0-1060.69~20.04.1","5.15.0-1061.70~20.04.1","5.15.0-1063.72~20.04.1","5.15.0-1064.73~20.04.1","5.15.0-1065.74~20.04.1","5.15.0-1067.76~20.04.1","5.15.0-1068.77~20.04.1","5.15.0-1070.79~20.04.1","5.15.0-1071.80~20.04.1","5.15.0-1072.81~20.04.1","5.15.0-1073.82~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1079.88~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1082.91~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.1","5.15.0-1088.97~20.04.1","5.15.0-1089.98~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1094.103~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1102.111~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1110.119~20.04.1","5.15.0-1111.120~20.04.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1123.132~20.04.1","5.15.0-1125.134~20.04.1","5.15.0-1126.135~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1","5.15.0-1125.134~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1","5.15.0-1038.46~20.04.1","5.15.0-1039.47~20.04.1","5.15.0-1040.48~20.04.1","5.15.0-1041.49~20.04.1","5.15.0-1042.50~20.04.1","5.15.0-1044.52~20.04.1","5.15.0-1045.53~20.04.2","5.15.0-1046.54~20.04.1","5.15.0-1047.55~20.04.1","5.15.0-1048.56~20.04.1","5.15.0-1049.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1055.63~20.04.1","5.15.0-1058.66~20.04.1","5.15.0-1059.67~20.04.1","5.15.0-1060.68~20.04.1","5.15.0-1062.70~20.04.1","5.15.0-1065.73~20.04.1","5.15.0-1066.74~20.04.1","5.15.0-1067.75~20.04.1","5.15.0-1068.76~20.04.1","5.15.0-1069.77~20.04.1","5.15.0-1070.78~20.04.1","5.15.0-1071.79~20.04.1","5.15.0-1072.80~20.04.1","5.15.0-1073.81~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1077.86~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1083.92~20.04.1","5.15.0-1085.94~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.2","5.15.0-1088.97~20.04.1","5.15.0-1090.99~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1092.101~20.04.1","5.15.0-1093.102~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1099.108~20.04.1","5.15.0-1100.109~20.04.1","5.15.0-1101.110~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1104.113~20.04.1","5.15.0-1106.115~20.04.1","5.15.0-1108.117~20.04.1","5.15.0-1109.118~20.04.1","5.15.0-1111.121~20.04.1","5.15.0-1112.122~20.04.1","5.15.0-1114.124~20.04.1","5.15.0-1118.128~20.04.1","5.15.0-1120.130~20.04.1","5.15.0-1121.131~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.37~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1044.51~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1048.55~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.58~20.04.1","5.15.0-1052.59~20.04.1","5.15.0-1053.60~20.04.1","5.15.0-1054.61~20.04.1","5.15.0-1055.62~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.86~20.04.2","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.96~20.04.1","5.15.0-87.97~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-130.140~20.04.1","5.15.0-131.141~20.04.1","5.15.0-134.145~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-151.161~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.3","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-176.186~20.04.1","5.15.0-177.187~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-185.195~20.04.1","5.15.0-186.196~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1","5.15.0-198.208~20.04.1","5.15.0-202.212~20.04.1","5.15.0-203.213~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1033.36~20.04.1","5.15.0-1034.37~20.04.1","5.15.0-1035.38~20.04.1","5.15.0-1036.39~20.04.1","5.15.0-1037.40~20.04.1","5.15.0-1038.41~20.04.1","5.15.0-1040.43~20.04.1","5.15.0-1041.44~20.04.1","5.15.0-1042.45~20.04.1","5.15.0-1043.46~20.04.1","5.15.0-1044.47~20.04.1","5.15.0-1045.48~20.04.1","5.15.0-1046.49~20.04.1","5.15.0-1047.50~20.04.1","5.15.0-1048.51~20.04.1","5.15.0-1049.52~20.04.1","5.15.0-1050.53~20.04.1","5.15.0-1053.56~20.04.1","5.15.0-1054.57~20.04.1","5.15.0-1055.58~20.04.1","5.15.0-1057.60~20.04.1","5.15.0-1058.61~20.04.1","5.15.0-1059.62~20.04.1","5.15.0-1060.63~20.04.1","5.15.0-1061.64~20.04.1","5.15.0-1062.65~20.04.1","5.15.0-1063.66~20.04.1","5.15.0-1064.67~20.04.1","5.15.0-1065.68~20.04.1","5.15.0-1066.69~20.04.1","5.15.0-1067.70~20.04.1","5.15.0-1068.71~20.04.1","5.15.0-1069.72~20.04.1","5.15.0-1074.77~20.04.1","5.15.0-1075.78~20.04.1","5.15.0-1076.79~20.04.1","5.15.0-1078.81~20.04.1","5.15.0-1079.82~20.04.1","5.15.0-1080.83~20.04.1","5.15.0-1081.84~20.04.1","5.15.0-1083.86~20.04.1","5.15.0-1085.88~20.04.1","5.15.0-1086.89~20.04.1","5.15.0-1087.90~20.04.1","5.15.0-1089.92~20.04.1","5.15.0-1090.93~20.04.1","5.15.0-1091.94~20.04.1","5.15.0-1092.95~20.04.1","5.15.0-1093.96~20.04.1","5.15.0-1094.97~20.04.1","5.15.0-1095.98~20.04.1","5.15.0-1097.100~20.04.1","5.15.0-1098.101~20.04.1","5.15.0-1099.102~20.04.1","5.15.0-1100.103~20.04.1","5.15.0-1102.105~20.04.1","5.15.0-1103.106~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1","5.15.0-1111.115~20.04.1","5.15.0-1113.117~20.04.1","5.15.0-1114.118~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.49~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1060.66~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.2","5.15.0-1074.80~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.1","5.15.0-1086.92~20.04.1","5.15.0-1087.93~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1099.105~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1103.109~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1107.113~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1","5.15.0-1112.118~20.04.1","5.15.0-1114.120~20.04.1","5.15.0-1115.121~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.88~20.04.1","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.95~20.04.1","5.15.0-87.96~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-110.120~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-128.138~20.04.1","5.15.0-129.139~20.04.1","5.15.0-131.141~20.04.1","5.15.0-133.143~20.04.1","5.15.0-134.145~20.04.1","5.15.0-135.146~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-140.150~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.1","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-174.184~20.04.1","5.15.0-175.185~20.04.1","5.15.0-177.187~20.04.1","5.15.0-178.188~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-183.193~20.04.1","5.15.0-184.194~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1","5.15.0-195.205~20.04.1","5.15.0-197.207~20.04.1","5.15.0-198.208~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-nvidia-tegra-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1009.9~20.04.1","5.15.0-1010.10~20.04.1","5.15.0-1012.12~20.04.1","5.15.0-1014.14~20.04.1","5.15.0-1015.15~20.04.1","5.15.0-1016.16~20.04.1","5.15.0-1017.17~20.04.1","5.15.0-1018.18~20.04.1","5.15.0-1019.19~20.04.1","5.15.0-1020.20~20.04.1","5.15.0-1022.22~20.04.1","5.15.0-1025.25~20.04.1","5.15.0-1027.27~20.04.1","5.15.0-1030.30~20.04.1","5.15.0-1032.32~20.04.1","5.15.0-1039.39~20.04.1","5.15.0-1040.40~20.04.1","5.15.0-1041.41~20.04.1","5.15.0-1042.42~20.04.1","5.15.0-1043.43~20.04.1","5.15.0-1044.44~20.04.1","5.15.0-1045.45~20.04.1","5.15.0-1046.46~20.04.1","5.15.0-1047.47~20.04.1","5.15.0-1048.48~20.04.1","5.15.0-1049.49~20.04.1","5.15.0-1050.50~20.04.1","5.15.0-1051.51~20.04.1","5.15.0-1052.52~20.04.2","5.15.0-1053.53~20.04.1","5.15.0-1055.55~20.04.1","5.15.0-1057.57~20.04.1","5.15.0-1058.58~20.04.1","5.15.0-1060.60~20.04.1","5.15.0-1061.61~20.04.1","5.15.0-1063.63~20.04.1","5.15.0-1064.66~20.04.1","5.15.0-1065.67~20.04.1","5.15.0-1066.68~20.04.1","5.15.0-1067.69~20.04.1","5.15.0-1068.70~20.04.1","5.15.0-1070.72~20.04.1","5.15.0-1071.73~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1041.47~20.04.1","5.15.0-1042.48~20.04.1","5.15.0-1044.50~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1047.53~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1053.59~20.04.1","5.15.0-1054.60~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1074.80~20.04.1","5.15.0-1075.81~20.04.1","5.15.0-1076.82~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1080.86~20.04.1","5.15.0-1081.87~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.3","5.15.0-1086.92~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1097.103~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1102.108~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1","5.15.0-1114.120~20.04.1","5.15.0-1116.122~20.04.1","5.15.0-1117.123~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-riscv-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1015.17~20.04.1","5.15.0-1017.19~20.04.1","5.15.0-1018.21~20.04.1","5.15.0-1019.22~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1029.33~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1032.36~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.2","5.15.0-1037.41~20.04.2","5.15.0-1038.42~20.04.2","5.15.0-1039.43~20.04.2","5.15.0-1040.44~20.04.3","5.15.0-1041.45~20.04.1","5.15.0-1043.47~20.04.1","5.15.0-1044.48~20.04.1","5.15.0-1045.49~20.04.1","5.15.0-1046.50~20.04.1","5.15.0-1047.51~20.04.1","5.15.0-1048.52~20.04.1","5.15.0-1049.53~20.04.2","5.15.0-1050.54~20.04.1","5.15.0-1051.55~20.04.1","5.15.0-1052.56~20.04.1","5.15.0-1053.57~20.04.1","5.15.0-1056.60~20.04.1","5.15.0-1057.61~20.04.1","5.15.0-1058.62~20.04.1","5.15.0-1059.63~20.04.1","5.15.0-1060.64~20.04.1","5.15.0-1061.65~20.04.1","5.15.0-1062.66~20.04.1","5.15.0-1063.67~20.04.1","5.15.0-1064.68~20.04.1","5.15.0-1065.69~20.04.1","5.15.0-1066.70~20.04.1","5.15.0-1067.71~20.04.1","5.15.0-1068.72~20.04.1","5.15.0-1069.73~20.04.1","5.15.0-1070.74~20.04.1","5.15.0-1071.75~20.04.1","5.15.0-1072.76~20.04.1","5.15.0-1073.77~20.04.1","5.15.0-1074.78~20.04.1","5.15.0-1075.79~20.04.1","5.15.0-1076.80~20.04.1","5.15.0-1077.81~20.04.1","5.15.0-1078.82~20.04.1","5.15.0-1079.83~20.04.1","5.15.0-1081.85~20.04.1","5.15.0-1082.86~20.04.1","5.15.0-1083.87~20.04.1","5.15.0-1084.88~20.04.1","5.15.0-1085.89~20.04.1","5.15.0-1086.90~20.04.1","5.15.0-1087.91~20.04.1","5.15.0-1088.92~20.04.1","5.15.0-1090.94~20.04.1","5.15.0-1091.95~20.04.1","5.15.0-1092.96~20.04.1","5.15.0-1093.97~20.04.2","5.15.0-1094.98~20.04.1","5.15.0-1095.99~20.04.1","5.15.0-1096.100~20.04.1","5.15.0-1097.101~20.04.1","5.15.0-1098.102~20.04.1","5.15.0-1099.103~20.04.1","5.15.0-1100.104~20.04.1","5.15.0-1102.106~20.04.1","5.15.0-1103.107~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1","5.15.0-1111.115~20.04.1","5.15.0-1113.117~20.04.2","5.15.0-1114.118~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.86","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.96","5.15.0-87.97","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-112.122","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-130.140","5.15.0-131.141","5.15.0-133.144","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-151.161","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-176.186","5.15.0-177.187","5.15.0-179.189","5.15.0-181.191","5.15.0-185.195","5.15.0-186.196","5.15.0-187.197","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204","5.15.0-198.208","5.15.0-202.212","5.15.0-203.213"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1055.60","5.15.0-1056.61","5.15.0-1057.63","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1076.83","5.15.0-1078.85","5.15.0-1079.86","5.15.0-1080.87","5.15.0-1081.88","5.15.0-1082.89","5.15.0-1083.90","5.15.0-1084.91","5.15.0-1085.92","5.15.0-1086.93","5.15.0-1087.94","5.15.0-1088.95","5.15.0-1089.96","5.15.0-1090.97","5.15.0-1091.98","5.15.0-1092.99","5.15.0-1093.100","5.15.0-1095.102","5.15.0-1096.103","5.15.0-1097.104","5.15.0-1098.105","5.15.0-1099.106","5.15.0-1100.107","5.15.0-1101.108","5.15.0-1103.110","5.15.0-1104.111","5.15.0-1105.112","5.15.0-1106.113","5.15.0-1108.115","5.15.0-1109.116","5.15.0-1111.118","5.15.0-1112.119","5.15.0-1113.120","5.15.0-1114.121","5.15.0-1115.122","5.15.0-1116.123","5.15.0-1117.124","5.15.0-1119.126","5.15.0-1120.127"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1012.12~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.2","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1022.22~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.64~22.04.1"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1016.17~22.04.2","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1023.25~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1035.37~22.04.1","6.8.0-1036.38~22.04.1","6.8.0-1039.41~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.44~22.04.1","6.8.0-1043.45~22.04.1","6.8.0-1044.46~22.04.1","6.8.0-1045.47~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1057.60~22.04.1","6.8.0-1060.63~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48","5.15.0-1042.49","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1056.64","5.15.0-1057.65","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.69","5.15.0-1061.70","5.15.0-1063.72","5.15.0-1064.73","5.15.0-1066.75","5.15.0-1067.76","5.15.0-1068.77","5.15.0-1070.79","5.15.0-1071.80","5.15.0-1072.81","5.15.0-1073.82","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1084.93","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1101.110","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1109.118","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1121.130","5.15.0-1122.131","5.15.0-1123.132","5.15.0-1125.134","5.15.0-1126.135"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7~22.04.1","6.5.0-1009.9~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.19~22.04.2","6.5.0-1019.20~22.04.1","6.5.0-1021.22~22.04.1","6.5.0-1022.23~22.04.1","6.5.0-1023.24~22.04.1","6.5.0-1024.25~22.04.1","6.5.0-1025.26~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1063.71~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1012.14~22.04.1","6.8.0-1013.15~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.2","6.8.0-1017.20~22.04.1","6.8.0-1018.21~22.04.1","6.8.0-1020.23~22.04.1","6.8.0-1021.25~22.04.1","6.8.0-1025.30~22.04.1","6.8.0-1026.31~22.04.1","6.8.0-1027.32~22.04.1","6.8.0-1028.33~22.04.1","6.8.0-1029.34~22.04.1","6.8.0-1030.35~22.04.1","6.8.0-1031.36~22.04.1","6.8.0-1034.39~22.04.1","6.8.0-1036.42~22.04.1","6.8.0-1040.46~22.04.1","6.8.0-1041.47~22.04.1","6.8.0-1044.50~22.04.1","6.8.0-1051.57~22.04.1","6.8.0-1052.58~22.04.1","6.8.0-1059.65~22.04.1","6.8.0-1062.69~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24.1","5.15.0-1024.30.1","5.15.0-1029.36.1","5.15.0-1030.37.1","5.15.0-1031.38.1","5.15.0-1033.40.1","5.15.0-1034.41.1","5.15.0-1035.42.1","5.15.0-1036.43.1","5.15.0-1037.44.1","5.15.0-1038.45.1","5.15.0-1039.46.1","5.15.0-1041.48.1","5.15.0-1042.49.1","5.15.0-1044.51.1","5.15.0-1045.52.1","5.15.0-1046.53.1","5.15.0-1047.54.1","5.15.0-1049.56.1","5.15.0-1050.57.1","5.15.0-1051.59.1","5.15.0-1052.60.1","5.15.0-1053.61.1","5.15.0-1054.62.1","5.15.0-1056.64.1","5.15.0-1057.65.1","5.15.0-1058.66.1","5.15.0-1059.67.1","5.15.0-1060.69.1","5.15.0-1061.70.1","5.15.0-1063.72.1","5.15.0-1064.73.1","5.15.0-1065.74.1","5.15.0-1067.76.1","5.15.0-1068.77.1","5.15.0-1070.79.1","5.15.0-1071.80.1","5.15.0-1072.81.1","5.15.0-1073.82.1","5.15.0-1076.85.1","5.15.0-1078.87.1","5.15.0-1081.90.1","5.15.0-1082.91.1","5.15.0-1084.93.1","5.15.0-1086.95.1","5.15.0-1087.96.1","5.15.0-1088.97.1","5.15.0-1089.98.1","5.15.0-1090.99.1","5.15.0-1091.100.1","5.15.0-1092.101.1","5.15.0-1094.103.1","5.15.0-1095.104.1","5.15.0-1096.105.1","5.15.0-1097.106.1","5.15.0-1098.107.1","5.15.0-1102.111.1","5.15.0-1109.118.1","5.15.0-1110.119.1","5.15.0-1111.120.1","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1120.129","5.15.0-1121.130","5.15.0-1122.131","5.15.0-1124.133","5.15.0-1125.134"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1062.69~22.04.1"}]}],"versions":["6.8.0-1041.48~22.04.1","6.8.0-1042.49~22.04.1","6.8.0-1044.51~22.04.1","6.8.0-1046.53~22.04.1","6.8.0-1053.60~22.04.1","6.8.0-1058.65~22.04.1","6.8.0-1061.68~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45","5.15.0-1038.46","5.15.0-1039.47","5.15.0-1040.48","5.15.0-1041.49","5.15.0-1042.50","5.15.0-1044.52","5.15.0-1045.53","5.15.0-1046.54","5.15.0-1047.55","5.15.0-1048.56","5.15.0-1049.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1055.63","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1077.86","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1080.89","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1101.110","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1106.115","5.15.0-1108.117","5.15.0-1109.118","5.15.0-1111.121","5.15.0-1112.122","5.15.0-1114.124","5.15.0-1115.125","5.15.0-1117.127","5.15.0-1118.128","5.15.0-1120.130","5.15.0-1121.131"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1016.18~22.04.1","6.2.0-1017.19~22.04.1","6.2.0-1018.20~22.04.1","6.2.0-1019.21~22.04.1","6.2.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10~22.04.3","6.5.0-1011.11~22.04.1","6.5.0-1013.13~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1022.24~22.04.1","6.5.0-1023.25~22.04.1","6.5.0-1024.26~22.04.1","6.5.0-1025.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.72~22.04.1"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1","6.8.0-1012.13~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.1","6.8.0-1016.18~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1025.27~22.04.1","6.8.0-1026.28~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1034.36~22.04.2","6.8.0-1036.38~22.04.1","6.8.0-1037.39~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.2","6.8.0-1048.51~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1063.69~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1104.110","5.15.0-1105.111","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119","5.15.0-1115.121","5.15.0-1116.122"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.37","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.50","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1048.55","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.58","5.15.0-1052.59","5.15.0-1053.60","5.15.0-1054.61","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.90","5.15.0-1083.91","5.15.0-1084.92","5.15.0-1086.94","5.15.0-1087.95","5.15.0-1088.96","5.15.0-1089.97","5.15.0-1091.99","5.15.0-1092.100","5.15.0-1094.102","5.15.0-1095.103","5.15.0-1096.104","5.15.0-1097.105","5.15.0-1098.106","5.15.0-1099.107","5.15.0-1100.108","5.15.0-1102.110","5.15.0-1103.111"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1","6.2.0-31.31~22.04.1","6.2.0-32.32~22.04.1","6.2.0-33.33~22.04.1","6.2.0-34.34~22.04.1","6.2.0-35.35~22.04.1","6.2.0-36.37~22.04.1","6.2.0-37.38~22.04.1","6.2.0-39.40~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14~22.04.1","6.5.0-15.15~22.04.1","6.5.0-17.17~22.04.1","6.5.0-18.18~22.04.1","6.5.0-21.21~22.04.1","6.5.0-25.25~22.04.1","6.5.0-26.26~22.04.1","6.5.0-27.28~22.04.1","6.5.0-28.29~22.04.1","6.5.0-35.35~22.04.1","6.5.0-41.41~22.04.2","6.5.0-44.44~22.04.1","6.5.0-45.45~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136~22.04.1"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1","6.8.0-40.40~22.04.3","6.8.0-45.45~22.04.1","6.8.0-47.47~22.04.1","6.8.0-48.48~22.04.1","6.8.0-49.49~22.04.1","6.8.0-50.51~22.04.1","6.8.0-51.52~22.04.1","6.8.0-52.53~22.04.1","6.8.0-57.59~22.04.1","6.8.0-58.60~22.04.1","6.8.0-59.61~22.04.1","6.8.0-60.63~22.04.1","6.8.0-64.67~22.04.1","6.8.0-65.68~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-85.85~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.2","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1056.59","5.15.0-1057.60","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1068.71","5.15.0-1069.72","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1081.84","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1094.97","5.15.0-1095.98","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.109","5.15.0-1106.110","5.15.0-1107.111","5.15.0-1108.112","5.15.0-1109.113","5.15.0-1110.114","5.15.0-1111.115","5.15.0-1113.117","5.15.0-1114.118"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.62~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.16~22.04.1","6.8.0-1017.17~22.04.1","6.8.0-1018.18~22.04.1","6.8.0-1019.19~22.04.1","6.8.0-1023.23~22.04.1","6.8.0-1024.24~22.04.1","6.8.0-1025.25~22.04.1","6.8.0-1026.26~22.04.1","6.8.0-1027.27~22.04.1","6.8.0-1028.28~22.04.1","6.8.0-1029.29~22.04.1","6.8.0-1030.30~22.04.1","6.8.0-1033.33~22.04.1","6.8.0-1036.36~22.04.1","6.8.0-1037.37~22.04.1","6.8.0-1038.38~22.04.1","6.8.0-1039.39~22.04.1","6.8.0-1040.40~22.04.1","6.8.0-1041.41~22.04.1","6.8.0-1042.42~22.04.1","6.8.0-1043.43~22.04.1","6.8.0-1044.44~22.04.1","6.8.0-1045.45~22.04.1","6.8.0-1049.49~22.04.1","6.8.0-1050.50~22.04.1","6.8.0-1051.51~22.04.1","6.8.0-1052.52~22.04.1","6.8.0-1055.56~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1060.61~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.49","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1055.61","5.15.0-1057.63","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1098.104","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1103.109","5.15.0-1104.110","5.15.0-1106.112","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1114.120","5.15.0-1115.121"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.65","5.15.0-1061.66","5.15.0-1062.67","5.15.0-1063.68","5.15.0-1064.69","5.15.0-1065.70","5.15.0-1066.71","5.15.0-1067.72","5.15.0-1068.73","5.15.0-1069.74","5.15.0-1070.75","5.15.0-1071.76","5.15.0-1072.77","5.15.0-1073.78","5.15.0-1076.81","5.15.0-1077.82","5.15.0-1078.83","5.15.0-1079.84","5.15.0-1080.85","5.15.0-1081.86","5.15.0-1082.87","5.15.0-1083.88","5.15.0-1084.89","5.15.0-1085.90","5.15.0-1086.91","5.15.0-1087.92","5.15.0-1088.93","5.15.0-1089.94","5.15.0-1090.95","5.15.0-1091.96","5.15.0-1092.97","5.15.0-1093.98","5.15.0-1095.100","5.15.0-1096.101","5.15.0-1097.102","5.15.0-1098.103","5.15.0-1100.105","5.15.0-1101.106","5.15.0-1103.108","5.15.0-1104.109","5.15.0-1105.110","5.15.0-1106.111","5.15.0-1107.112","5.15.0-1108.113","5.15.0-1109.114","5.15.0-1111.116","5.15.0-1112.117"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.88","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.95","5.15.0-87.96","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-110.120","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-129.139","5.15.0-131.141","5.15.0-133.143","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-145.158","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-175.185","5.15.0-177.187","5.15.0-178.188","5.15.0-179.189","5.15.0-181.191","5.15.0-183.193","5.15.0-184.194","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204","5.15.0-195.205","5.15.0-197.207","5.15.0-198.208"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14.1~22.04.1","6.5.0-15.15.1.1~22.04.1","6.5.0-17.17.1.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-41.41.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-44.44.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136.2~22.04.1"}]}],"versions":["6.8.0-38.38.1~22.04.2","6.8.0-40.40.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-45.45.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.3~22.04.1","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-54.56.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-60.63.1~22.04.1","6.8.0-62.65.1~22.04.1","6.8.0-63.66.1~22.04.1","6.8.0-64.67.1~22.04.1","6.8.0-65.68.1~22.04.1","6.8.0-78.78.1~22.04.1","6.8.0-79.79.1~22.04.1","6.8.0-83.83.1~22.04.1","6.8.0-84.84.1~22.04.1","6.8.0-85.85.1~22.04.1","6.8.0-86.87.1~22.04.1","6.8.0-87.88.1~22.04.1","6.8.0-88.89.1~22.04.1","6.8.0-90.91.1~22.04.1","6.8.0-94.96.1~22.04.1","6.8.0-100.100.1~22.04.1","6.8.0-101.101.1~22.04.1","6.8.0-106.106.1~22.04.1","6.8.0-107.107.1~22.04.1","6.8.0-110.110.1~22.04.1","6.8.0-111.111.1~22.04.1","6.8.0-117.117.1~22.04.1","6.8.0-134.134.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1037.37","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1053.54","5.15.0-1054.55","5.15.0-1055.56","5.15.0-1058.59","5.15.0-1059.60","5.15.0-1060.61","5.15.0-1061.62","5.15.0-1062.63","5.15.0-1063.64","5.15.0-1064.65","5.15.0-1065.66","5.15.0-1066.67","5.15.0-1067.68","5.15.0-1068.69","5.15.0-1069.70","5.15.0-1070.71","5.15.0-1071.72","5.15.0-1072.73","5.15.0-1073.74","5.15.0-1074.75","5.15.0-1075.76","5.15.0-1076.77","5.15.0-1077.78","5.15.0-1078.79","5.15.0-1079.80","5.15.0-1080.81","5.15.0-1081.82","5.15.0-1082.83","5.15.0-1083.84","5.15.0-1085.86","5.15.0-1086.87","5.15.0-1087.88","5.15.0-1088.89","5.15.0-1090.91","5.15.0-1091.92","5.15.0-1092.93","5.15.0-1093.94","5.15.0-1094.95","5.15.0-1095.96","5.15.0-1096.97","5.15.0-1098.99","5.15.0-1099.100","5.15.0-1100.101","5.15.0-1101.102","5.15.0-1103.104","5.15.0-1104.105","5.15.0-1106.107","5.15.0-1107.108","5.15.0-1108.109","5.15.0-1109.110","5.15.0-1110.111","5.15.0-1111.112","5.15.0-1112.113","5.15.0-1114.115","5.15.0-1115.116"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1004.4","6.5.0-1007.7","6.5.0-1013.13","6.5.0-1014.14","6.5.0-1015.15","6.5.0-1018.18","6.5.0-1019.19","6.5.0-1021.22","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.62~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1022.25~22.04.2","6.8.0-1023.26~22.04.1","6.8.0-1024.27~22.04.1","6.8.0-1025.28~22.04.1","6.8.0-1026.29~22.04.1","6.8.0-1027.30~22.04.1","6.8.0-1028.31~22.04.1","6.8.0-1029.32~22.04.1","6.8.0-1030.33~22.04.1","6.8.0-1031.34~22.04.1","6.8.0-1032.35~22.04.1","6.8.0-1035.38~22.04.1","6.8.0-1036.39~22.04.1","6.8.0-1038.41~22.04.1","6.8.0-1039.42~22.04.1","6.8.0-1040.43~22.04.1","6.8.0-1041.44~22.04.2","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1049.52~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1058.61~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1009.9","5.15.0-1010.10","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1030.30","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1051.51","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1058.58","5.15.0-1060.60","5.15.0-1061.61","5.15.0-1063.63","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1068.70","5.15.0-1070.72","5.15.0-1071.73"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1001.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1009.9","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1023.23","5.15.0-1024.24","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1054.54","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1059.59"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17","6.1.0-1019.19","6.1.0-1020.20","6.1.0-1021.21","6.1.0-1022.22","6.1.0-1023.23","6.1.0-1024.24","6.1.0-1025.25","6.1.0-1026.26","6.1.0-1027.27","6.1.0-1028.28","6.1.0-1029.29","6.1.0-1033.33","6.1.0-1034.34","6.1.0-1035.35","6.1.0-1036.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1003.3","6.5.0-1004.4","6.5.0-1006.6","6.5.0-1007.7","6.5.0-1008.8","6.5.0-1009.10","6.5.0-1011.12","6.5.0-1013.14","6.5.0-1014.15","6.5.0-1015.16","6.5.0-1016.17","6.5.0-1018.19","6.5.0-1019.20","6.5.0-1020.21","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25","6.5.0-1025.26","6.5.0-1027.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1041.47","5.15.0-1042.48","5.15.0-1044.50","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.61","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1098.104","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1103.109","5.15.0-1105.111","5.15.0-1106.112","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119","5.15.0-1114.120","5.15.0-1116.122","5.15.0-1117.123"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1013.13~22.04.4","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1019.19~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1","6.5.0-1025.25~22.04.1","6.5.0-1026.26~22.04.1","6.5.0-1027.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1058.61~22.04.1"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.17~22.04.1","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.20~22.04.1","6.8.0-1020.21~22.04.1","6.8.0-1021.22~22.04.1","6.8.0-1022.23~22.04.1","6.8.0-1023.24~22.04.1","6.8.0-1024.25~22.04.1","6.8.0-1025.26~22.04.1","6.8.0-1026.27~22.04.1","6.8.0-1027.28~22.04.1","6.8.0-1028.29~22.04.1","6.8.0-1029.30~22.04.1","6.8.0-1030.31~22.04.1","6.8.0-1032.33~22.04.1","6.8.0-1033.34~22.04.1","6.8.0-1035.36~22.04.1","6.8.0-1037.38~22.04.1","6.8.0-1038.39~22.04.1","6.8.0-1039.40~22.04.1","6.8.0-1040.41~22.04.1","6.8.0-1041.42~22.04.1","6.8.0-1042.43~22.04.1","6.8.0-1043.44~22.04.1","6.8.0-1044.45~22.04.1","6.8.0-1047.48~22.04.1","6.8.0-1049.50~22.04.1","6.8.0-1050.51~22.04.1","6.8.0-1052.53~22.04.1","6.8.0-1054.55~22.04.1","6.8.0-1057.58~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.20","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1025.27","5.15.0-1026.28","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1029.31","5.15.0-1030.32","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1083.86","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.108","5.15.0-1106.109","5.15.0-1108.111","5.15.0-1110.113","5.15.0-1113.116"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-17.17.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-40.40.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136~22.04.3"}]}],"versions":["6.8.0-38.38.1~22.04.1","6.8.0-39.39.1~22.04.1","6.8.0-40.40.1~22.04.1","6.8.0-41.41.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.1~22.04.2","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-53.55.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-62.65~22.04.1","6.8.0-63.66~22.04.1","6.8.0-64.67~22.04.1","6.8.0-71.71~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.1","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1006.7~22.04.1","6.2.0-1007.8~22.04.1","6.2.0-1009.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.8~22.04.1","6.5.0-1008.9~22.04.1","6.5.0-1009.10~22.04.1","6.5.0-1010.11~22.04.1","6.5.0-1011.12~22.04.1","6.5.0-1012.13~22.04.1","6.5.0-1014.15~22.04.1","6.5.0-1015.16~22.04.1","6.5.0-1016.17~22.04.1","6.5.0-1017.18~22.04.1","6.5.0-1018.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1022.26","5.15.0-1023.27","5.15.0-1025.29","5.15.0-1027.31","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.42","5.15.0-1039.43","5.15.0-1041.45","5.15.0-1044.48","5.15.0-1046.50","5.15.0-1050.54","5.15.0-1051.55","5.15.0-1052.56","5.15.0-1053.57","5.15.0-1054.58","5.15.0-1055.59","5.15.0-1056.60","5.15.0-1057.61","5.15.0-1059.63","5.15.0-1060.64","5.15.0-1061.65","5.15.0-1062.66","5.15.0-1063.67","5.15.0-1064.68","5.15.0-1065.69","5.15.0-1067.71","5.15.0-1068.72","5.15.0-1069.73","5.15.0-1070.74","5.15.0-1074.78","5.15.0-1075.79","5.15.0-1076.80","5.15.0-1077.81","5.15.0-1078.82","5.15.0-1079.83","5.15.0-1080.84"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:22.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1017.19","5.15.0-1019.21","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1031.33","5.15.0-1032.34","5.15.0-1033.35","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1040.42","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1045.47","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1050.52","5.15.0-1051.53","5.15.0-1052.54","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1062.64","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1069.71","5.15.0-1070.72","5.15.0-1072.74","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1095.97","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105","5.15.0-1104.106"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1028.33","5.15.0-1033.35","5.15.0-1034.36","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1039.41","5.15.0-1040.42","5.15.0-1041.43","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1046.48","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1049.51","5.15.0-1050.52","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1055.57","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1066.68","5.15.0-1071.73","5.15.0-1072.74","5.15.0-1073.75","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1078.80","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1088.90","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1091.93","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1094.96","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105","5.15.0-1104.106","5.15.0-1105.107","5.15.0-1106.108","5.15.0-1107.109","5.15.0-1108.110","5.15.0-1109.111","5.15.0-1111.115","5.15.0-1112.116"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1006.6","5.15.0-1007.7","5.15.0-1009.9","5.15.0-1011.11","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1024.25","5.15.0-1025.28","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1039.42","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.52","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1077.85","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1107.116","5.15.0-1108.117","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1112.121","5.15.0-1113.122","5.15.0-1114.123","5.15.0-1115.124","5.15.0-1116.125","5.15.0-1118.127","5.15.0-1119.128"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1056.57~22.04.2"}]}],"versions":["6.8.1-1004.4~22.04.1","6.8.1-1005.5~22.04.2","6.8.1-1006.6~22.04.1","6.8.1-1007.7~22.04.1","6.8.1-1008.8~22.04.1","6.8.1-1009.9~22.04.1","6.8.1-1010.10~22.04.1","6.8.1-1011.11~22.04.1","6.8.1-1012.12~22.04.1","6.8.1-1013.14~22.04.1","6.8.1-1014.15~22.04.1","6.8.1-1015.16~22.04.1","6.8.1-1016.17~22.04.1","6.8.1-1017.18~22.04.1","6.8.1-1018.19~22.04.1","6.8.1-1019.20~22.04.1","6.8.1-1020.21~22.04.1","6.8.1-1021.22~22.04.1","6.8.1-1022.23~22.04.1","6.8.1-1023.24~22.04.1","6.8.1-1024.25~22.04.1","6.8.1-1025.26~22.04.1","6.8.1-1026.27~22.04.1","6.8.1-1030.31~22.04.1","6.8.1-1031.32~22.04.1","6.8.1-1034.35~22.04.1","6.8.1-1035.36~22.04.1","6.8.1-1036.37~22.04.1","6.8.1-1037.38~22.04.1","6.8.1-1038.39~22.04.1","6.8.1-1039.40~22.04.1","6.8.1-1040.41~22.04.1","6.8.1-1041.42~22.04.1","6.8.1-1042.43~22.04.1","6.8.1-1045.46~22.04.1","6.8.1-1046.47~22.04.2","6.8.1-1047.48~22.04.1","6.8.1-1048.49~22.04.1","6.8.1-1051.52~22.04.1","6.8.1-1052.53~22.04.1","6.8.1-1055.56~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1042.47+fips1","5.15.0-1051.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1053.61+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1048.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1051.56+fips1","5.15.0-1052.57+fips1","5.15.0-1053.58+fips1","5.15.0-1055.60+fips1","5.15.0-1056.61+fips1","5.15.0-1057.63+fips1","5.15.0-1060.66+fips1","5.15.0-1061.67+fips1","5.15.0-1062.68+fips1","5.15.0-1063.69+fips1","5.15.0-1064.70+fips1","5.15.0-1065.71+fips1","5.15.0-1066.72+fips1","5.15.0-1067.73+fips1","5.15.0-1068.74+fips1","5.15.0-1069.75+fips1","5.15.0-1070.76+fips1","5.15.0-1071.77+fips1","5.15.0-1072.78+fips1","5.15.0-1073.79+fips1","5.15.0-1076.83+fips1","5.15.0-1077.84+fips1","5.15.0-1078.85+fips1","5.15.0-1079.86+fips1","5.15.0-1080.87+fips1","5.15.0-1081.88+fips1","5.15.0-1082.89+fips1","5.15.0-1083.90+fips1","5.15.0-1084.91+fips1","5.15.0-1085.92+fips1","5.15.0-1086.93+fips1","5.15.0-1087.94+fips1","5.15.0-1088.95+fips1","5.15.0-1089.96+fips1","5.15.0-1090.97+fips1","5.15.0-1091.98+fips1","5.15.0-1092.99+fips1","5.15.0-1093.100+fips1","5.15.0-1095.102+fips1","5.15.0-1096.103+fips1","5.15.0-1097.104+fips1","5.15.0-1098.105+fips1","5.15.0-1099.106+fips1","5.15.0-1100.107+fips1","5.15.0-1101.108+fips1","5.15.0-1103.110+fips1","5.15.0-1104.111+fips1","5.15.0-1105.112+fips1","5.15.0-1106.113+fips1","5.15.0-1108.115+fips1","5.15.0-1109.116+fips1","5.15.0-1111.118+fips1","5.15.0-1112.119+fips1","5.15.0-1113.120+fips1","5.15.0-1114.121+fips1","5.15.0-1115.122+fips1","5.15.0-1116.123+fips1","5.15.0-1117.124+fips1","5.15.0-1119.126+fips1","5.15.0-1120.127+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1053.61+fips1","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.69+fips1","5.15.0-1061.70+fips1","5.15.0-1063.72+fips1","5.15.0-1064.73+fips1","5.15.0-1065.74+fips1","5.15.0-1067.76+fips1","5.15.0-1068.77+fips1","5.15.0-1070.79+fips1","5.15.0-1071.80+fips1","5.15.0-1072.81+fips1","5.15.0-1073.82+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1085.94+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1089.98+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1094.103+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1101.110+fips1","5.15.0-1102.111+fips1","5.15.0-1103.112+fips1","5.15.0-1109.118+fips1","5.15.0-1110.119+fips1","5.15.0-1111.120+fips1","5.15.0-1114.123+fips1","5.15.0-1116.125+fips1","5.15.0-1117.126+fips1","5.15.0-1118.127+fips1","5.15.0-1119.128+fips1","5.15.0-1121.130+fips1","5.15.0-1122.131+fips1","5.15.0-1123.132+fips1","5.15.0-1125.134+fips1","5.15.0-1126.135+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1","5.15.0-92.102+fips1","5.15.0-94.104+fips1","5.15.0-97.107+fips1","5.15.0-100.110+fips1","5.15.0-101.111+fips1","5.15.0-102.112+fips1","5.15.0-105.115+fips1","5.15.0-106.116+fips1","5.15.0-107.117+fips1","5.15.0-111.121+fips1","5.15.0-113.123+fips1","5.15.0-115.125+fips1","5.15.0-117.127+fips1","5.15.0-118.128+fips1","5.15.0-119.129+fips1","5.15.0-121.131+fips1","5.15.0-122.132+fips1","5.15.0-124.134+fips1","5.15.0-125.135+fips1","5.15.0-127.137+fips1","5.15.0-128.138+fips1","5.15.0-130.140+fips1","5.15.0-131.141+fips1","5.15.0-133.144+fips1","5.15.0-134.145+fips1","5.15.0-135.146+fips1","5.15.0-136.147+fips1","5.15.0-138.148+fips1","5.15.0-139.149+fips1","5.15.0-140.150+fips1","5.15.0-141.151+fips1","5.15.0-142.152+fips1","5.15.0-143.153+fips1","5.15.0-144.157+fips1","5.15.0-145.158+fips1","5.15.0-152.162+fips1","5.15.0-153.163+fips1","5.15.0-156.166+fips1","5.15.0-157.167+fips1","5.15.0-160.170+fips1","5.15.0-161.171+fips1","5.15.0-163.173+fips1","5.15.0-164.174+fips1","5.15.0-168.178+fips1","5.15.0-170.180+fips1","5.15.0-171.181+fips1","5.15.0-173.183+fips1","5.15.0-174.184+fips1","5.15.0-176.186+fips1","5.15.0-177.187+fips1","5.15.0-179.189+fips1","5.15.0-181.191+fips1","5.15.0-185.195+fips1","5.15.0-186.196+fips1","5.15.0-190.200+fips1","5.15.0-191.201+fips1","5.15.0-194.204+fips1","5.15.0-198.208+fips1","5.15.0-202.212+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1048.56+fips1","5.15.0-1055.63+fips2","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.68+fips1","5.15.0-1062.70+fips1","5.15.0-1063.71+fips1","5.15.0-1064.72+fips1","5.15.0-1065.73+fips1","5.15.0-1066.74+fips1","5.15.0-1067.75+fips1","5.15.0-1068.76+fips1","5.15.0-1069.77+fips1","5.15.0-1070.78+fips1","5.15.0-1071.79+fips1","5.15.0-1072.80+fips1","5.15.0-1073.81+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1077.86+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1081.90+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1084.93+fips1","5.15.0-1085.94+fips1","5.15.0-1086.95+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1092.101+fips1","5.15.0-1093.102+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1099.108+fips1","5.15.0-1100.109+fips1","5.15.0-1101.110+fips1","5.15.0-1103.112+fips1","5.15.0-1104.113+fips1","5.15.0-1105.114+fips1","5.15.0-1106.115+fips1","5.15.0-1108.117+fips1","5.15.0-1109.118+fips1","5.15.0-1111.121+fips1","5.15.0-1112.122+fips1","5.15.0-1114.124+fips1","5.15.0-1115.125+fips1","5.15.0-1116.126+fips1","5.15.0-1118.128+fips1","5.15.0-1120.130+fips1","5.15.0-1121.131+fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55","6.8.0-54.56","6.8.0-55.57","6.8.0-56.58","6.8.0-57.59","6.8.0-58.60","6.8.0-59.61","6.8.0-60.63","6.8.0-62.65","6.8.0-63.66","6.8.0-64.67","6.8.0-71.71","6.8.0-78.78","6.8.0-79.79","6.8.0-83.83","6.8.0-84.84","6.8.0-85.85","6.8.0-86.87","6.8.0-87.88","6.8.0-88.89","6.8.0-90.91","6.8.0-94.96","6.8.0-100.100","6.8.0-101.101","6.8.0-106.106","6.8.0-107.107","6.8.0-110.110","6.8.0-111.111","6.8.0-117.117","6.8.0-124.124","6.8.0-134.134"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.64"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1035.37","6.8.0-1036.38","6.8.0-1038.40","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.44","6.8.0-1043.45","6.8.0-1044.46","6.8.0-1045.47","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1055.58","6.8.0-1057.60","6.8.0-1060.63"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.2","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1019.19~24.04.1","6.17.0-1020.20~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1063.71"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25","6.8.0-1025.30","6.8.0-1026.31","6.8.0-1027.32","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1034.39","6.8.0-1038.44","6.8.0-1040.46","6.8.0-1041.47","6.8.0-1042.48","6.8.0-1044.50","6.8.0-1046.52","6.8.0-1051.57","6.8.0-1052.58","6.8.0-1054.60","6.8.0-1056.62","6.8.0-1058.64","6.8.0-1059.65","6.8.0-1062.69"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1010.10~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1008.8~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.2","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1020.20~24.04.1","6.17.0-1021.21~24.04.1","6.17.0-1022.22"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1062.69"}]}],"versions":["6.8.0-1041.48","6.8.0-1044.51","6.8.0-1046.53","6.8.0-1053.60","6.8.0-1058.65","6.8.0-1061.68"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1013.14","6.8.0-1014.15","6.8.0-1016.17","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1022.23","6.8.0-1025.27","6.8.0-1027.30","6.8.0-1029.32","6.8.0-1039.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3","6.14.0-1006.6","6.14.0-1007.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.72"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1034.36","6.8.0-1036.38","6.8.0-1037.39","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1048.51","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1060.63","6.8.0-1063.69"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1014.15~24.04.1","6.14.0-1015.16~24.04.1","6.14.0-1016.17~24.04.1","6.14.0-1017.18~24.04.1","6.14.0-1018.19~24.04.1","6.14.0-1019.20~24.04.1","6.14.0-1020.21~24.04.1","6.14.0-1021.22~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.3","6.17.0-1008.8~24.04.1","6.17.0-1009.9~24.04.3","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1016.17~24.04.1","6.17.0-1018.19~24.04.1","6.17.0-1020.22~24.04.1","6.17.0-1021.24~24.04.1","6.17.0-1022.25"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.67"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1021.25","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1024.28","6.8.0-1025.29","6.8.0-1026.30","6.8.0-1027.31","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1032.36","6.8.0-1033.37","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1037.41","6.8.0-1038.43","6.8.0-1039.44","6.8.0-1040.45","6.8.0-1041.46","6.8.0-1042.47","6.8.0-1043.48","6.8.0-1044.49","6.8.0-1048.53","6.8.0-1049.54","6.8.0-1050.56","6.8.0-1051.57","6.8.0-1054.60","6.8.0-1055.61","6.8.0-1058.64"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1046.50"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6","6.8.0-1006.8","6.8.0-1007.9","6.8.0-1008.10","6.8.0-1009.11","6.8.0-1010.12","6.8.0-1011.13","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1022.24","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1037.40","6.8.0-1038.41","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1045.48"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-24.24~24.04.3","6.14.0-27.27~24.04.1","6.14.0-28.28~24.04.1","6.14.0-29.29~24.04.1","6.14.0-32.32~24.04.1","6.14.0-33.33~24.04.1","6.14.0-34.34~24.04.1","6.14.0-35.35~24.04.1","6.14.0-36.36~24.04.1","6.14.0-37.37~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14~24.04.1","6.17.0-19.19~24.04.2","6.17.0-20.20~24.04.1","6.17.0-22.22~24.04.1","6.17.0-23.23~24.04.1","6.17.0-29.29~24.04.1","6.17.0-35.35~24.04.1","6.17.0-40.40~24.04.1","6.17.0-41.41~24.04.1","6.17.0-42.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.62"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1033.33","6.8.0-1036.36","6.8.0-1037.37","6.8.0-1038.38","6.8.0-1039.39","6.8.0-1040.40","6.8.0-1041.41","6.8.0-1042.42","6.8.0-1043.43","6.8.0-1044.44","6.8.0-1045.45","6.8.0-1049.49","6.8.0-1050.50","6.8.0-1051.51","6.8.0-1052.52","6.8.0-1055.56","6.8.0-1057.58","6.8.0-1060.61"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136.2"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2","6.8.0-54.56.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1","6.8.0-62.65.1","6.8.0-63.66.1","6.8.0-64.67.1","6.8.0-65.68.1","6.8.0-78.78.1","6.8.0-79.79.1","6.8.0-83.83.1","6.8.0-84.84.1","6.8.0-85.85.1","6.8.0-86.87.1","6.8.0-87.88.1","6.8.0-88.89.1","6.8.0-90.91.1","6.8.0-94.96.1","6.8.0-100.100.1","6.8.0-101.101.1","6.8.0-106.106.1","6.8.0-107.107.1","6.8.0-110.110.1","6.8.0-111.111.1","6.8.0-117.117.1","6.8.0-134.134.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.62"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1022.25","6.8.0-1023.26","6.8.0-1024.27","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1032.35","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1038.41","6.8.0-1039.42","6.8.0-1040.43","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1049.52","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1002.2","6.11.0-1003.3","6.11.0-1007.7","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4","6.17.0-1008.8","6.17.0-1014.14","6.17.0-1018.18","6.17.0-1021.21","6.17.0-1026.26","6.17.0-1029.29","6.17.0-1031.31","6.17.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.62.1"}]}],"versions":["6.8.0-1009.9.1","6.8.0-1011.11.1","6.8.0-1012.12.1","6.8.0-1013.14.1","6.8.0-1014.15.1","6.8.0-1015.16.1","6.8.0-1017.19.1","6.8.0-1018.20.1","6.8.0-1019.21.1","6.8.0-1020.22.1","6.8.0-1021.23.1","6.8.0-1022.25.2","6.8.0-1023.26.1","6.8.0-1024.27.1","6.8.0-1025.28.1","6.8.0-1026.29.1","6.8.0-1027.30.1","6.8.0-1028.31.1","6.8.0-1029.32.1","6.8.0-1030.33.1","6.8.0-1031.34.1","6.8.0-1032.35.1","6.8.0-1035.38.1","6.8.0-1036.39.1","6.8.0-1038.41.1","6.8.0-1039.42.1","6.8.0-1040.43.1","6.8.0-1041.44.1","6.8.0-1042.45.1","6.8.0-1043.46.1","6.8.0-1044.47.1","6.8.0-1045.48.1","6.8.0-1046.49.1","6.8.0-1047.50.1","6.8.0-1049.52.1","6.8.0-1050.53.1","6.8.0-1051.54.1","6.8.0-1052.55.1","6.8.0-1054.57.1","6.8.0-1055.58.1","6.8.0-1058.61.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1030.31"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1007.7","6.11.0-1008.8","6.11.0-1009.9","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1015.15","6.11.0-1016.16","6.11.0-1017.17","6.11.0-1018.18","6.11.0-1020.20","6.11.0-1021.21","6.11.0-1022.22","6.11.0-1023.23","6.11.0-1024.24","6.11.0-1025.25","6.11.0-1027.27"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1004.4","6.14.0-1005.5","6.14.0-1006.6","6.14.0-1007.7","6.14.0-1008.8","6.14.0-1010.10","6.14.0-1011.11","6.14.0-1012.12","6.14.0-1013.13","6.14.0-1014.14","6.14.0-1015.15","6.14.0-1016.16","6.14.0-1017.17","6.14.0-1018.18","6.14.0-1019.19","6.14.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1008.8","6.17.0-1009.9","6.17.0-1010.10","6.17.0-1011.11","6.17.0-1012.12","6.17.0-1017.17","6.17.0-1020.20","6.17.0-1023.23","6.17.0-1024.24","6.17.0-1025.25","6.17.0-1028.28","6.17.0-1030.30","6.17.0-1032.32","6.17.0-1033.33"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1031.31","6.8.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1058.61"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1025.26","6.8.0-1026.27","6.8.0-1027.28","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1035.36","6.8.0-1037.38","6.8.0-1038.39","6.8.0-1039.40","6.8.0-1040.41","6.8.0-1041.42","6.8.0-1042.43","6.8.0-1043.44","6.8.0-1044.45","6.8.0-1047.48","6.8.0-1049.50","6.8.0-1050.51","6.8.0-1052.53","6.8.0-1054.55","6.8.0-1057.58"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.1","6.17.0-1014.14~24.04.1","6.17.0-1016.16~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1019.19~24.04.3","6.17.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.65"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1024.28","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1030.34","6.8.0-1031.35","6.8.0-1032.36","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1038.42","6.8.0-1039.43","6.8.0-1040.44","6.8.0-1041.45","6.8.0-1042.46","6.8.0-1043.47","6.8.0-1044.48","6.8.0-1045.49","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1050.54","6.8.0-1051.55","6.8.0-1052.56","6.8.0-1053.57","6.8.0-1056.60","6.8.0-1057.61","6.8.0-1060.64"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-22.22.1~24.04.1","6.14.0-23.23.1~24.04.1","6.14.0-24.24.1~24.04.1","6.14.0-27.27.1~24.04.1","6.14.0-28.28.1~24.04.1","6.14.0-29.29.1~24.04.1","6.14.0-32.32.1~24.04.1","6.14.0-33.33.1~24.04.1","6.14.0-34.34.1~24.04.1","6.14.0-35.35.1~24.04.1","6.14.0-36.36.1~24.04.1","6.14.0-37.37.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14.1~24.04.1","6.17.0-19.19.1~24.04.1","6.17.0-20.20.1~24.04.1","6.17.0-22.22.1~24.04.1","6.17.0-23.23.1~24.04.1","6.17.0-29.29.1~24.04.1","6.17.0-35.35.1~24.04.1","6.17.0-38.38.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1008.8"}]}],"versions":["6.8.0-1005.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-xilinx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1033.34"}]}],"versions":["6.8.0-1008.9","6.8.0-1009.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1032.33"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:24.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1028.33"}]}],"versions":["6.8.0-1011.15","6.8.0-1012.16","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1026.30"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-2050.52"}]}],"versions":["6.7.0-2001.1","6.8.0-2001.1","6.8.0-2002.2","6.8.0-2004.4","6.8.0-2005.5","6.8.0-2006.6","6.8.0-2007.7","6.8.0-2008.8","6.8.0-2009.9","6.8.0-2010.10","6.8.0-2011.11","6.8.0-2012.12","6.8.0-2013.14","6.8.0-2014.15","6.8.0-2015.16","6.8.0-2016.17","6.8.0-2017.18","6.8.0-2018.19","6.8.0-2019.20","6.8.0-2022.23","6.8.0-2023.24","6.8.0-2024.25","6.8.0-2025.26","6.8.0-2026.27","6.8.0-2028.29","6.8.0-2029.30","6.8.0-2030.31","6.8.0-2031.32","6.8.0-2032.33","6.8.0-2033.34","6.8.0-2034.35","6.8.0-2035.36","6.8.0-2036.37","6.8.0-2037.38","6.8.0-2038.39","6.8.0-2040.41","6.8.0-2041.42","6.8.0-2042.43","6.8.0-2043.44","6.8.0-2045.46","6.8.0-2046.47","6.8.0-2049.50"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1056.57"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5","6.8.1-1006.6","6.8.1-1007.7","6.8.1-1008.8","6.8.1-1009.9","6.8.1-1010.10","6.8.1-1011.11","6.8.1-1012.12","6.8.1-1013.14","6.8.1-1014.15","6.8.1-1015.16","6.8.1-1016.17","6.8.1-1017.18","6.8.1-1018.19","6.8.1-1019.20","6.8.1-1020.21","6.8.1-1021.22","6.8.1-1022.23","6.8.1-1023.24","6.8.1-1024.25","6.8.1-1025.26","6.8.1-1026.27","6.8.1-1030.31","6.8.1-1031.32","6.8.1-1033.34","6.8.1-1034.35","6.8.1-1035.36","6.8.1-1036.37","6.8.1-1037.38","6.8.1-1038.39","6.8.1-1039.40","6.8.1-1040.41","6.8.1-1041.42","6.8.1-1042.43","6.8.1-1045.46","6.8.1-1046.47","6.8.1-1047.48","6.8.1-1048.49","6.8.1-1051.52","6.8.1-1052.53","6.8.1-1055.56"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3~24.04.3","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.5~24.04.2","6.17.0-1006.7~24.04.1","6.17.0-1008.9~24.04.1","6.17.0-1009.10~24.04.1","6.17.0-1010.11~24.04.1","6.17.0-1011.12~24.04.1","6.17.0-1013.15~24.04.1","6.17.0-1014.16~24.04.1","6.17.0-1017.19~24.04.1","6.17.0-1018.20~24.04.1","6.17.0-1019.22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.64+fips1"}]}],"versions":["6.8.0-1035.37+fips1","6.8.0-1036.38+fips1","6.8.0-1038.40+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.44+fips1","6.8.0-1043.45+fips1","6.8.0-1044.46+fips1","6.8.0-1045.47+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1050.53+fips1","6.8.0-1051.54+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1055.58+fips1","6.8.0-1057.60+fips1","6.8.0-1060.63+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1063.71+fips2"}]}],"versions":["6.8.0-1034.39+fips1","6.8.0-1040.46+fips1","6.8.0-1044.50+fips1","6.8.0-1046.52+fips1","6.8.0-1047.53+fips1","6.8.0-1052.58+fips1","6.8.0-1053.59+fips1","6.8.0-1054.60+fips1","6.8.0-1059.65+fips1","6.8.0-1062.69+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136+fips2"}]}],"versions":["6.8.0-38.38+fips4","6.8.0-78.78+fips1","6.8.0-79.79+fips1","6.8.0-83.83+fips1","6.8.0-84.84+fips1","6.8.0-85.85+fips1","6.8.0-86.87+fips1","6.8.0-87.88+fips1","6.8.0-88.89+fips1","6.8.0-90.91+fips1","6.8.0-94.96+fips1","6.8.0-100.100+fips1","6.8.0-101.101+fips1","6.8.0-106.106+fips1","6.8.0-107.107+fips1","6.8.0-110.110+fips2","6.8.0-111.111+fips1","6.8.0-116.116+fips1","6.8.0-124.124+fips1","6.8.0-134.134+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.72+fips1"}]}],"versions":["6.8.0-1036.38+fips1","6.8.0-1037.39+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.45+fips1","6.8.0-1043.46+fips1","6.8.0-1044.47+fips1","6.8.0-1045.48+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1048.51+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1054.57+fips1","6.8.0-1055.58+fips1","6.8.0-1058.61+fips1","6.8.0-1060.63+fips1","6.8.0-1063.69+fips1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-15.15","6.15.0-3.3","6.15.0-4.4","6.16.0-13.13","6.16.0-16.16","6.17.0-3.3","6.17.0-4.4","6.17.0-5.5","6.17.0-6.6","6.17.0-7.7","6.17.0-8.8","6.17.0-12.12","6.17.0-14.14","6.17.0-19.19","6.17.0-20.20","6.17.0-22.22","6.17.0-23.23","6.17.0-29.29","6.17.0-35.35","6.17.0-40.40"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1005.5","6.14.0-1007.7+25.10.2","6.16.0-1001.1","6.17.0-1001.1","6.17.0-1002.2","6.17.0-1003.3","6.17.0-1004.4","6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1009.9","6.17.0-1010.10","6.17.0-1012.12","6.17.0-1013.13","6.17.0-1015.15","6.17.0-1017.17","6.17.0-1019.19"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1004.4","6.14.0-1007.7+25.10.1","6.16.0-1001.1","6.17.0-1002.2","6.17.0-1003.3","6.17.0-1004.4","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1008.8","6.17.0-1010.10","6.17.0-1011.11","6.17.0-1013.13","6.17.0-1015.15","6.17.0-1017.17","6.17.0-1018.18","6.17.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1003.3","6.17.0-1004.4","6.17.0-1005.5","6.17.0-1007.7","6.17.0-1008.8","6.17.0-1010.10","6.17.0-1012.12","6.17.0-1014.14","6.17.0-1015.15","6.17.0-1017.17"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1006.6","6.14.0-1009.9+25.10.1","6.16.0-1001.1","6.17.0-1001.1","6.17.0-1002.2","6.17.0-1003.3","6.17.0-1004.4","6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1009.9","6.17.0-1010.10","6.17.0-1012.12","6.17.0-1013.13","6.17.0-1016.17","6.17.0-1018.19","6.17.0-1020.22"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1005.5","6.14.0-1007.7+25.10.1","6.16.0-1001.1","6.17.0-1001.1","6.17.0-1002.2","6.17.0-1003.3","6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1009.9","6.17.0-1010.10","6.17.0-1011.11","6.17.0-1012.12","6.17.0-1014.14","6.17.0-1016.16","6.17.0-1018.18"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1005.5","6.17.0-1003.3","6.17.0-1004.4","6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1008.8","6.17.0-1010.10","6.17.0-1011.11","6.17.0-1013.13","6.17.0-1014.14","6.17.0-1017.17","6.17.0-1018.18","6.17.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1002.2","6.17.0-1001.2","6.17.0-1002.3","6.17.0-1003.4","6.17.0-1004.5","6.17.0-1005.6","6.17.0-1006.7","6.17.0-1008.9","6.17.0-1009.10","6.17.0-1010.11","6.17.0-1011.12","6.17.0-1013.15","6.17.0-1014.16","6.17.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-13.13.2","6.17.0-4.4.1","6.17.0-5.5.1","6.17.0-6.6.1","6.17.0-7.7.1","6.17.0-8.8.1","6.17.0-12.12.1","6.17.0-14.14.1","6.17.0-19.19.1","6.17.0-20.20.1","6.17.0-22.22.1","6.17.0-23.23.1","6.17.0-29.29.1","6.17.0-35.35.1","6.17.0-40.40.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.72~22.04.1"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1","6.8.0-1012.13~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.1","6.8.0-1016.18~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1025.27~22.04.1","6.8.0-1026.28~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1034.36~22.04.2","6.8.0-1036.38~22.04.1","6.8.0-1037.39~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.2","6.8.0-1048.51~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1063.69~22.04.1"],"bundled":891},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1056.57~22.04.2"}]}],"versions":["6.8.1-1004.4~22.04.1","6.8.1-1005.5~22.04.2","6.8.1-1006.6~22.04.1","6.8.1-1007.7~22.04.1","6.8.1-1008.8~22.04.1","6.8.1-1009.9~22.04.1","6.8.1-1010.10~22.04.1","6.8.1-1011.11~22.04.1","6.8.1-1012.12~22.04.1","6.8.1-1013.14~22.04.1","6.8.1-1014.15~22.04.1","6.8.1-1015.16~22.04.1","6.8.1-1016.17~22.04.1","6.8.1-1017.18~22.04.1","6.8.1-1018.19~22.04.1","6.8.1-1019.20~22.04.1","6.8.1-1020.21~22.04.1","6.8.1-1021.22~22.04.1","6.8.1-1022.23~22.04.1","6.8.1-1023.24~22.04.1","6.8.1-1024.25~22.04.1","6.8.1-1025.26~22.04.1","6.8.1-1026.27~22.04.1","6.8.1-1030.31~22.04.1","6.8.1-1031.32~22.04.1","6.8.1-1034.35~22.04.1","6.8.1-1035.36~22.04.1","6.8.1-1036.37~22.04.1","6.8.1-1037.38~22.04.1","6.8.1-1038.39~22.04.1","6.8.1-1039.40~22.04.1","6.8.1-1040.41~22.04.1","6.8.1-1041.42~22.04.1","6.8.1-1042.43~22.04.1","6.8.1-1045.46~22.04.1","6.8.1-1046.47~22.04.2","6.8.1-1047.48~22.04.1","6.8.1-1048.49~22.04.1","6.8.1-1051.52~22.04.1","6.8.1-1052.53~22.04.1","6.8.1-1055.56~22.04.1"],"bundled":891},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55","6.8.0-54.56","6.8.0-55.57","6.8.0-56.58","6.8.0-57.59","6.8.0-58.60","6.8.0-59.61","6.8.0-60.63","6.8.0-62.65","6.8.0-63.66","6.8.0-64.67","6.8.0-71.71","6.8.0-78.78","6.8.0-79.79","6.8.0-83.83","6.8.0-84.84","6.8.0-85.85","6.8.0-86.87","6.8.0-87.88","6.8.0-88.89","6.8.0-90.91","6.8.0-94.96","6.8.0-100.100","6.8.0-101.101","6.8.0-106.106","6.8.0-107.107","6.8.0-110.110","6.8.0-111.111","6.8.0-117.117","6.8.0-124.124","6.8.0-134.134"],"bundled":891},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.72"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1034.36","6.8.0-1036.38","6.8.0-1037.39","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1048.51","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1060.63","6.8.0-1063.69"],"bundled":891},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.67"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1021.25","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1024.28","6.8.0-1025.29","6.8.0-1026.30","6.8.0-1027.31","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1032.36","6.8.0-1033.37","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1037.41","6.8.0-1038.43","6.8.0-1039.44","6.8.0-1040.45","6.8.0-1041.46","6.8.0-1042.47","6.8.0-1043.48","6.8.0-1044.49","6.8.0-1048.53","6.8.0-1049.54","6.8.0-1050.56","6.8.0-1051.57","6.8.0-1054.60","6.8.0-1055.61","6.8.0-1058.64"],"bundled":891},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1046.50"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6","6.8.0-1006.8","6.8.0-1007.9","6.8.0-1008.10","6.8.0-1009.11","6.8.0-1010.12","6.8.0-1011.13","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1022.24","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1037.40","6.8.0-1038.41","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1045.48"],"bundled":891},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1056.57"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5","6.8.1-1006.6","6.8.1-1007.7","6.8.1-1008.8","6.8.1-1009.9","6.8.1-1010.10","6.8.1-1011.11","6.8.1-1012.12","6.8.1-1013.14","6.8.1-1014.15","6.8.1-1015.16","6.8.1-1016.17","6.8.1-1017.18","6.8.1-1018.19","6.8.1-1019.20","6.8.1-1020.21","6.8.1-1021.22","6.8.1-1022.23","6.8.1-1023.24","6.8.1-1024.25","6.8.1-1025.26","6.8.1-1026.27","6.8.1-1030.31","6.8.1-1031.32","6.8.1-1033.34","6.8.1-1034.35","6.8.1-1035.36","6.8.1-1036.37","6.8.1-1037.38","6.8.1-1038.39","6.8.1-1039.40","6.8.1-1040.41","6.8.1-1041.42","6.8.1-1042.43","6.8.1-1045.46","6.8.1-1046.47","6.8.1-1047.48","6.8.1-1048.49","6.8.1-1051.52","6.8.1-1052.53","6.8.1-1055.56"],"bundled":891},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.72+fips1"}]}],"versions":["6.8.0-1036.38+fips1","6.8.0-1037.39+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.45+fips1","6.8.0-1043.46+fips1","6.8.0-1044.47+fips1","6.8.0-1045.48+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1048.51+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1054.57+fips1","6.8.0-1055.58+fips1","6.8.0-1058.61+fips1","6.8.0-1060.63+fips1","6.8.0-1063.69+fips1"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136.2~22.04.1"}]}],"versions":["6.8.0-38.38.1~22.04.2","6.8.0-40.40.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-45.45.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.3~22.04.1","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-54.56.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-60.63.1~22.04.1","6.8.0-62.65.1~22.04.1","6.8.0-63.66.1~22.04.1","6.8.0-64.67.1~22.04.1","6.8.0-65.68.1~22.04.1","6.8.0-78.78.1~22.04.1","6.8.0-79.79.1~22.04.1","6.8.0-83.83.1~22.04.1","6.8.0-84.84.1~22.04.1","6.8.0-85.85.1~22.04.1","6.8.0-86.87.1~22.04.1","6.8.0-87.88.1~22.04.1","6.8.0-88.89.1~22.04.1","6.8.0-90.91.1~22.04.1","6.8.0-94.96.1~22.04.1","6.8.0-100.100.1~22.04.1","6.8.0-101.101.1~22.04.1","6.8.0-106.106.1~22.04.1","6.8.0-107.107.1~22.04.1","6.8.0-110.110.1~22.04.1","6.8.0-111.111.1~22.04.1","6.8.0-117.117.1~22.04.1","6.8.0-134.134.1~22.04.1"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136.2"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2","6.8.0-54.56.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1","6.8.0-62.65.1","6.8.0-63.66.1","6.8.0-64.67.1","6.8.0-65.68.1","6.8.0-78.78.1","6.8.0-79.79.1","6.8.0-83.83.1","6.8.0-84.84.1","6.8.0-85.85.1","6.8.0-86.87.1","6.8.0-87.88.1","6.8.0-88.89.1","6.8.0-90.91.1","6.8.0-94.96.1","6.8.0-100.100.1","6.8.0-101.101.1","6.8.0-106.106.1","6.8.0-107.107.1","6.8.0-110.110.1","6.8.0-111.111.1","6.8.0-117.117.1","6.8.0-134.134.1"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1058.61"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1025.26","6.8.0-1026.27","6.8.0-1027.28","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1035.36","6.8.0-1037.38","6.8.0-1038.39","6.8.0-1039.40","6.8.0-1040.41","6.8.0-1041.42","6.8.0-1042.43","6.8.0-1043.44","6.8.0-1044.45","6.8.0-1047.48","6.8.0-1049.50","6.8.0-1050.51","6.8.0-1052.53","6.8.0-1054.55","6.8.0-1057.58"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136+fips2"}]}],"versions":["6.8.0-38.38+fips4","6.8.0-78.78+fips1","6.8.0-79.79+fips1","6.8.0-83.83+fips1","6.8.0-84.84+fips1","6.8.0-85.85+fips1","6.8.0-86.87+fips1","6.8.0-87.88+fips1","6.8.0-88.89+fips1","6.8.0-90.91+fips1","6.8.0-94.96+fips1","6.8.0-100.100+fips1","6.8.0-101.101+fips1","6.8.0-106.106+fips1","6.8.0-107.107+fips1","6.8.0-110.110+fips2","6.8.0-111.111+fips1","6.8.0-116.116+fips1","6.8.0-124.124+fips1","6.8.0-134.134+fips1"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.62~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.16~22.04.1","6.8.0-1017.17~22.04.1","6.8.0-1018.18~22.04.1","6.8.0-1019.19~22.04.1","6.8.0-1023.23~22.04.1","6.8.0-1024.24~22.04.1","6.8.0-1025.25~22.04.1","6.8.0-1026.26~22.04.1","6.8.0-1027.27~22.04.1","6.8.0-1028.28~22.04.1","6.8.0-1029.29~22.04.1","6.8.0-1030.30~22.04.1","6.8.0-1033.33~22.04.1","6.8.0-1036.36~22.04.1","6.8.0-1037.37~22.04.1","6.8.0-1038.38~22.04.1","6.8.0-1039.39~22.04.1","6.8.0-1040.40~22.04.1","6.8.0-1041.41~22.04.1","6.8.0-1042.42~22.04.1","6.8.0-1043.43~22.04.1","6.8.0-1044.44~22.04.1","6.8.0-1045.45~22.04.1","6.8.0-1049.49~22.04.1","6.8.0-1050.50~22.04.1","6.8.0-1051.51~22.04.1","6.8.0-1052.52~22.04.1","6.8.0-1055.56~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1060.61~22.04.1"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.62"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1033.33","6.8.0-1036.36","6.8.0-1037.37","6.8.0-1038.38","6.8.0-1039.39","6.8.0-1040.40","6.8.0-1041.41","6.8.0-1042.42","6.8.0-1043.43","6.8.0-1044.44","6.8.0-1045.45","6.8.0-1049.49","6.8.0-1050.50","6.8.0-1051.51","6.8.0-1052.52","6.8.0-1055.56","6.8.0-1057.58","6.8.0-1060.61"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1030.31"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-xilinx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1033.34"}]}],"versions":["6.8.0-1008.9","6.8.0-1009.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1032.33"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1058.61~22.04.1"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.17~22.04.1","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.20~22.04.1","6.8.0-1020.21~22.04.1","6.8.0-1021.22~22.04.1","6.8.0-1022.23~22.04.1","6.8.0-1023.24~22.04.1","6.8.0-1024.25~22.04.1","6.8.0-1025.26~22.04.1","6.8.0-1026.27~22.04.1","6.8.0-1027.28~22.04.1","6.8.0-1028.29~22.04.1","6.8.0-1029.30~22.04.1","6.8.0-1030.31~22.04.1","6.8.0-1032.33~22.04.1","6.8.0-1033.34~22.04.1","6.8.0-1035.36~22.04.1","6.8.0-1037.38~22.04.1","6.8.0-1038.39~22.04.1","6.8.0-1039.40~22.04.1","6.8.0-1040.41~22.04.1","6.8.0-1041.42~22.04.1","6.8.0-1042.43~22.04.1","6.8.0-1043.44~22.04.1","6.8.0-1044.45~22.04.1","6.8.0-1047.48~22.04.1","6.8.0-1049.50~22.04.1","6.8.0-1050.51~22.04.1","6.8.0-1052.53~22.04.1","6.8.0-1054.55~22.04.1","6.8.0-1057.58~22.04.1"],"bundled":912},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.64"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1035.37","6.8.0-1036.38","6.8.0-1038.40","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.44","6.8.0-1043.45","6.8.0-1044.46","6.8.0-1045.47","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1055.58","6.8.0-1057.60","6.8.0-1060.63"],"bundled":912},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.64~22.04.1"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1016.17~22.04.2","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1023.25~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1035.37~22.04.1","6.8.0-1036.38~22.04.1","6.8.0-1039.41~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.44~22.04.1","6.8.0-1043.45~22.04.1","6.8.0-1044.46~22.04.1","6.8.0-1045.47~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1057.60~22.04.1","6.8.0-1060.63~22.04.1"],"bundled":912},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.64+fips1"}]}],"versions":["6.8.0-1035.37+fips1","6.8.0-1036.38+fips1","6.8.0-1038.40+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.44+fips1","6.8.0-1043.45+fips1","6.8.0-1044.46+fips1","6.8.0-1045.47+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1050.53+fips1","6.8.0-1051.54+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1055.58+fips1","6.8.0-1057.60+fips1","6.8.0-1060.63+fips1"],"bundled":912},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.62~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1022.25~22.04.2","6.8.0-1023.26~22.04.1","6.8.0-1024.27~22.04.1","6.8.0-1025.28~22.04.1","6.8.0-1026.29~22.04.1","6.8.0-1027.30~22.04.1","6.8.0-1028.31~22.04.1","6.8.0-1029.32~22.04.1","6.8.0-1030.33~22.04.1","6.8.0-1031.34~22.04.1","6.8.0-1032.35~22.04.1","6.8.0-1035.38~22.04.1","6.8.0-1036.39~22.04.1","6.8.0-1038.41~22.04.1","6.8.0-1039.42~22.04.1","6.8.0-1040.43~22.04.1","6.8.0-1041.44~22.04.2","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1049.52~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1058.61~22.04.1"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.62"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1022.25","6.8.0-1023.26","6.8.0-1024.27","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1032.35","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1038.41","6.8.0-1039.42","6.8.0-1040.43","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1049.52","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1059.62.1"}]}],"versions":["6.8.0-1009.9.1","6.8.0-1011.11.1","6.8.0-1012.12.1","6.8.0-1013.14.1","6.8.0-1014.15.1","6.8.0-1015.16.1","6.8.0-1017.19.1","6.8.0-1018.20.1","6.8.0-1019.21.1","6.8.0-1020.22.1","6.8.0-1021.23.1","6.8.0-1022.25.2","6.8.0-1023.26.1","6.8.0-1024.27.1","6.8.0-1025.28.1","6.8.0-1026.29.1","6.8.0-1027.30.1","6.8.0-1028.31.1","6.8.0-1029.32.1","6.8.0-1030.33.1","6.8.0-1031.34.1","6.8.0-1032.35.1","6.8.0-1035.38.1","6.8.0-1036.39.1","6.8.0-1038.41.1","6.8.0-1039.42.1","6.8.0-1040.43.1","6.8.0-1041.44.1","6.8.0-1042.45.1","6.8.0-1043.46.1","6.8.0-1044.47.1","6.8.0-1045.48.1","6.8.0-1046.49.1","6.8.0-1047.50.1","6.8.0-1049.52.1","6.8.0-1050.53.1","6.8.0-1051.54.1","6.8.0-1052.55.1","6.8.0-1054.57.1","6.8.0-1055.58.1","6.8.0-1058.61.1"],"bundled":913},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1063.71~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1012.14~22.04.1","6.8.0-1013.15~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.2","6.8.0-1017.20~22.04.1","6.8.0-1018.21~22.04.1","6.8.0-1020.23~22.04.1","6.8.0-1021.25~22.04.1","6.8.0-1025.30~22.04.1","6.8.0-1026.31~22.04.1","6.8.0-1027.32~22.04.1","6.8.0-1028.33~22.04.1","6.8.0-1029.34~22.04.1","6.8.0-1030.35~22.04.1","6.8.0-1031.36~22.04.1","6.8.0-1034.39~22.04.1","6.8.0-1036.42~22.04.1","6.8.0-1040.46~22.04.1","6.8.0-1041.47~22.04.1","6.8.0-1044.50~22.04.1","6.8.0-1051.57~22.04.1","6.8.0-1052.58~22.04.1","6.8.0-1059.65~22.04.1","6.8.0-1062.69~22.04.1"],"bundled":1210},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1063.71"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25","6.8.0-1025.30","6.8.0-1026.31","6.8.0-1027.32","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1034.39","6.8.0-1038.44","6.8.0-1040.46","6.8.0-1041.47","6.8.0-1042.48","6.8.0-1044.50","6.8.0-1046.52","6.8.0-1051.57","6.8.0-1052.58","6.8.0-1054.60","6.8.0-1056.62","6.8.0-1058.64","6.8.0-1059.65","6.8.0-1062.69"],"bundled":1210},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1062.69"}]}],"versions":["6.8.0-1041.48","6.8.0-1044.51","6.8.0-1046.53","6.8.0-1053.60","6.8.0-1058.65","6.8.0-1061.68"],"bundled":1205},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1063.71+fips2"}]}],"versions":["6.8.0-1034.39+fips1","6.8.0-1040.46+fips1","6.8.0-1044.50+fips1","6.8.0-1046.52+fips1","6.8.0-1047.53+fips1","6.8.0-1052.58+fips1","6.8.0-1053.59+fips1","6.8.0-1054.60+fips1","6.8.0-1059.65+fips1","6.8.0-1062.69+fips1"],"bundled":914},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1062.69~22.04.1"}]}],"versions":["6.8.0-1041.48~22.04.1","6.8.0-1042.49~22.04.1","6.8.0-1044.51~22.04.1","6.8.0-1046.53~22.04.1","6.8.0-1053.60~22.04.1","6.8.0-1058.65~22.04.1","6.8.0-1061.68~22.04.1"],"bundled":1206},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-136.136~22.04.1"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1","6.8.0-40.40~22.04.3","6.8.0-45.45~22.04.1","6.8.0-47.47~22.04.1","6.8.0-48.48~22.04.1","6.8.0-49.49~22.04.1","6.8.0-50.51~22.04.1","6.8.0-51.52~22.04.1","6.8.0-52.53~22.04.1","6.8.0-57.59~22.04.1","6.8.0-58.60~22.04.1","6.8.0-59.61~22.04.1","6.8.0-60.63~22.04.1","6.8.0-64.67~22.04.1","6.8.0-65.68~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-85.85~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.2","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1"],"bundled":1209},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1061.65"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1024.28","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1030.34","6.8.0-1031.35","6.8.0-1032.36","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1038.42","6.8.0-1039.43","6.8.0-1040.44","6.8.0-1041.45","6.8.0-1042.46","6.8.0-1043.47","6.8.0-1044.48","6.8.0-1045.49","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1050.54","6.8.0-1051.55","6.8.0-1052.56","6.8.0-1053.57","6.8.0-1056.60","6.8.0-1057.61","6.8.0-1060.64"],"bundled":912},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-2050.52"}]}],"versions":["6.7.0-2001.1","6.8.0-2001.1","6.8.0-2002.2","6.8.0-2004.4","6.8.0-2005.5","6.8.0-2006.6","6.8.0-2007.7","6.8.0-2008.8","6.8.0-2009.9","6.8.0-2010.10","6.8.0-2011.11","6.8.0-2012.12","6.8.0-2013.14","6.8.0-2014.15","6.8.0-2015.16","6.8.0-2016.17","6.8.0-2017.18","6.8.0-2018.19","6.8.0-2019.20","6.8.0-2022.23","6.8.0-2023.24","6.8.0-2024.25","6.8.0-2025.26","6.8.0-2026.27","6.8.0-2028.29","6.8.0-2029.30","6.8.0-2030.31","6.8.0-2031.32","6.8.0-2032.33","6.8.0-2033.34","6.8.0-2034.35","6.8.0-2035.36","6.8.0-2036.37","6.8.0-2037.38","6.8.0-2038.39","6.8.0-2040.41","6.8.0-2041.42","6.8.0-2042.43","6.8.0-2043.44","6.8.0-2045.46","6.8.0-2046.47","6.8.0-2049.50"],"bundled":912},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1.160000.2.19"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.37.1"}]}],"bundled":894}],"products":[{"vendor":"linux","product":"linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://git.kernel.org/stable/c/ede147a85d1d4c075d13ba190453d6b09ecbea37","tags":["web"]},{"url":"https://git.kernel.org/stable/c/a8a3fb2888e2c4fd5410a19ac1623cc78a2383ec","tags":["web"]},{"url":"https://git.kernel.org/stable/c/49c7c50ee6325a084216e94395e067ecde8088fa","tags":["Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/ca111c9d8d6c9d5735878d933a1716c4be86c2d1","tags":["Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/25ceffc1dabec3b93f458b437aae26f4da293f87","tags":["Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/2922e3507f6d5caa7f1d07f145e186fc6f317a4e","tags":["Patch","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31557","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-7v44-fgx9-96v6"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-31557","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1789986443.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37743","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23262","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31450","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31591","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31700","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45963","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52961","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53186","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53250","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53324","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64570","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68113","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68123","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68248","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68257","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68258","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68269","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68277","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68296","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68376","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68391","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74565","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31557.json","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-31557","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23346","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31453","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31681","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43026","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43220","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43350","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46174","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46330","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23214","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31759","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43186","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43240","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43334","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45834","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45961","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46190","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623066-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185845","tags":["report"]},{"url":"https://bugzilla.suse.com/1234634","tags":["report"]},{"url":"https://bugzilla.suse.com/1237449","tags":["report"]},{"url":"https://bugzilla.suse.com/1243603","tags":["report"]},{"url":"https://bugzilla.suse.com/1246179","tags":["report"]},{"url":"https://bugzilla.suse.com/1246182","tags":["report"]},{"url":"https://bugzilla.suse.com/1247455","tags":["report"]},{"url":"https://bugzilla.suse.com/1248480","tags":["report"]},{"url":"https://bugzilla.suse.com/1248611","tags":["report"]},{"url":"https://bugzilla.suse.com/1251966","tags":["report"]},{"url":"https://bugzilla.suse.com/1252682","tags":["report"]},{"url":"https://bugzilla.suse.com/1253262","tags":["report"]},{"url":"https://bugzilla.suse.com/1253434","tags":["report"]},{"url":"https://bugzilla.suse.com/1253454","tags":["report"]},{"url":"https://bugzilla.suse.com/1254306","tags":["report"]},{"url":"https://bugzilla.suse.com/1255224","tags":["report"]},{"url":"https://bugzilla.suse.com/1255250","tags":["report"]},{"url":"https://bugzilla.suse.com/1255441","tags":["report"]},{"url":"https://bugzilla.suse.com/1255687","tags":["report"]},{"url":"https://bugzilla.suse.com/1257721","tags":["report"]},{"url":"https://bugzilla.suse.com/1257777","tags":["report"]},{"url":"https://bugzilla.suse.com/1258472","tags":["report"]},{"url":"https://bugzilla.suse.com/1258718","tags":["report"]},{"url":"https://bugzilla.suse.com/1259329","tags":["report"]},{"url":"https://bugzilla.suse.com/1259762","tags":["report"]},{"url":"https://bugzilla.suse.com/1259764","tags":["report"]},{"url":"https://bugzilla.suse.com/1259866","tags":["report"]},{"url":"https://bugzilla.suse.com/1259955","tags":["report"]},{"url":"https://bugzilla.suse.com/1260012","tags":["report"]},{"url":"https://bugzilla.suse.com/1260347","tags":["report"]},{"url":"https://bugzilla.suse.com/1260553","tags":["report"]},{"url":"https://bugzilla.suse.com/1260593","tags":["report"]},{"url":"https://bugzilla.suse.com/1261250","tags":["report"]},{"url":"https://bugzilla.suse.com/1261562","tags":["report"]},{"url":"https://bugzilla.suse.com/1261590","tags":["report"]},{"url":"https://bugzilla.suse.com/1262160","tags":["report"]},{"url":"https://bugzilla.suse.com/1262391","tags":["report"]},{"url":"https://bugzilla.suse.com/1262573","tags":["report"]},{"url":"https://bugzilla.suse.com/1262602","tags":["report"]},{"url":"https://bugzilla.suse.com/1262603","tags":["report"]},{"url":"https://bugzilla.suse.com/1262605","tags":["report"]},{"url":"https://bugzilla.suse.com/1262614","tags":["report"]},{"url":"https://bugzilla.suse.com/1262637","tags":["report"]},{"url":"https://bugzilla.suse.com/1262639","tags":["report"]},{"url":"https://bugzilla.suse.com/1262640","tags":["report"]},{"url":"https://bugzilla.suse.com/1262652","tags":["report"]},{"url":"https://bugzilla.suse.com/1262653","tags":["report"]},{"url":"https://bugzilla.suse.com/1262655","tags":["report"]},{"url":"https://bugzilla.suse.com/1262658","tags":["report"]},{"url":"https://bugzilla.suse.com/1262659","tags":["report"]},{"url":"https://bugzilla.suse.com/1262663","tags":["report"]},{"url":"https://bugzilla.suse.com/1262678","tags":["report"]},{"url":"https://bugzilla.suse.com/1262679","tags":["report"]},{"url":"https://bugzilla.suse.com/1262723","tags":["report"]},{"url":"https://bugzilla.suse.com/1262734","tags":["report"]},{"url":"https://bugzilla.suse.com/1262745","tags":["report"]},{"url":"https://bugzilla.suse.com/1262746","tags":["report"]},{"url":"https://bugzilla.suse.com/1262751","tags":["report"]},{"url":"https://bugzilla.suse.com/1262757","tags":["report"]},{"url":"https://bugzilla.suse.com/1262768","tags":["report"]},{"url":"https://bugzilla.suse.com/1262770","tags":["report"]},{"url":"https://bugzilla.suse.com/1262771","tags":["report"]},{"url":"https://bugzilla.suse.com/1262992","tags":["report"]},{"url":"https://bugzilla.suse.com/1262993","tags":["report"]},{"url":"https://bugzilla.suse.com/1263008","tags":["report"]},{"url":"https://bugzilla.suse.com/1263010","tags":["report"]},{"url":"https://bugzilla.suse.com/1263011","tags":["report"]},{"url":"https://bugzilla.suse.com/1263013","tags":["report"]},{"url":"https://bugzilla.suse.com/1263014","tags":["report"]},{"url":"https://bugzilla.suse.com/1263016","tags":["report"]},{"url":"https://bugzilla.suse.com/1263017","tags":["report"]},{"url":"https://bugzilla.suse.com/1263020","tags":["report"]},{"url":"https://bugzilla.suse.com/1263025","tags":["report"]},{"url":"https://bugzilla.suse.com/1263030","tags":["report"]},{"url":"https://bugzilla.suse.com/1263031","tags":["report"]},{"url":"https://bugzilla.suse.com/1263045","tags":["report"]},{"url":"https://bugzilla.suse.com/1263055","tags":["report"]},{"url":"https://bugzilla.suse.com/1263059","tags":["report"]},{"url":"https://bugzilla.suse.com/1263061","tags":["report"]},{"url":"https://bugzilla.suse.com/1263065","tags":["report"]},{"url":"https://bugzilla.suse.com/1263073","tags":["report"]},{"url":"https://bugzilla.suse.com/1263075","tags":["report"]},{"url":"https://bugzilla.suse.com/1263097","tags":["report"]},{"url":"https://bugzilla.suse.com/1263111","tags":["report"]},{"url":"https://bugzilla.suse.com/1263122","tags":["report"]},{"url":"https://bugzilla.suse.com/1263123","tags":["report"]},{"url":"https://bugzilla.suse.com/1263124","tags":["report"]},{"url":"https://bugzilla.suse.com/1263128","tags":["report"]},{"url":"https://bugzilla.suse.com/1263130","tags":["report"]},{"url":"https://bugzilla.suse.com/1263134","tags":["report"]},{"url":"https://bugzilla.suse.com/1263139","tags":["report"]},{"url":"https://bugzilla.suse.com/1263142","tags":["report"]},{"url":"https://bugzilla.suse.com/1263145","tags":["report"]},{"url":"https://bugzilla.suse.com/1263152","tags":["report"]},{"url":"https://bugzilla.suse.com/1263167","tags":["report"]},{"url":"https://bugzilla.suse.com/1263170","tags":["report"]},{"url":"https://bugzilla.suse.com/1263173","tags":["report"]},{"url":"https://bugzilla.suse.com/1263175","tags":["report"]},{"url":"https://bugzilla.suse.com/1263491","tags":["report"]},{"url":"https://bugzilla.suse.com/1263493","tags":["report"]},{"url":"https://bugzilla.suse.com/1263495","tags":["report"]},{"url":"https://bugzilla.suse.com/1263539","tags":["report"]},{"url":"https://bugzilla.suse.com/1263560","tags":["report"]},{"url":"https://bugzilla.suse.com/1263588","tags":["report"]},{"url":"https://bugzilla.suse.com/1263591","tags":["report"]},{"url":"https://bugzilla.suse.com/1263598","tags":["report"]},{"url":"https://bugzilla.suse.com/1263600","tags":["report"]},{"url":"https://bugzilla.suse.com/1263657","tags":["report"]},{"url":"https://bugzilla.suse.com/1263718","tags":["report"]},{"url":"https://bugzilla.suse.com/1263723","tags":["report"]},{"url":"https://bugzilla.suse.com/1263776","tags":["report"]},{"url":"https://bugzilla.suse.com/1263777","tags":["report"]},{"url":"https://bugzilla.suse.com/1263778","tags":["report"]},{"url":"https://bugzilla.suse.com/1263780","tags":["report"]},{"url":"https://bugzilla.suse.com/1263782","tags":["report"]},{"url":"https://bugzilla.suse.com/1263785","tags":["report"]},{"url":"https://bugzilla.suse.com/1263786","tags":["report"]},{"url":"https://bugzilla.suse.com/1263788","tags":["report"]},{"url":"https://bugzilla.suse.com/1263790","tags":["report"]},{"url":"https://bugzilla.suse.com/1263797","tags":["report"]},{"url":"https://bugzilla.suse.com/1263806","tags":["report"]},{"url":"https://bugzilla.suse.com/1263876","tags":["report"]},{"url":"https://bugzilla.suse.com/1263879","tags":["report"]},{"url":"https://bugzilla.suse.com/1263880","tags":["report"]},{"url":"https://bugzilla.suse.com/1263904","tags":["report"]},{"url":"https://bugzilla.suse.com/1263905","tags":["report"]},{"url":"https://bugzilla.suse.com/1263911","tags":["report"]},{"url":"https://bugzilla.suse.com/1263917","tags":["report"]},{"url":"https://bugzilla.suse.com/1263918","tags":["report"]},{"url":"https://bugzilla.suse.com/1263919","tags":["report"]},{"url":"https://bugzilla.suse.com/1263921","tags":["report"]},{"url":"https://bugzilla.suse.com/1263923","tags":["report"]},{"url":"https://bugzilla.suse.com/1263945","tags":["report"]},{"url":"https://bugzilla.suse.com/1263975","tags":["report"]},{"url":"https://bugzilla.suse.com/1263999","tags":["report"]},{"url":"https://bugzilla.suse.com/1264003","tags":["report"]},{"url":"https://bugzilla.suse.com/1264006","tags":["report"]},{"url":"https://bugzilla.suse.com/1264008","tags":["report"]},{"url":"https://bugzilla.suse.com/1264009","tags":["report"]},{"url":"https://bugzilla.suse.com/1264013","tags":["report"]},{"url":"https://bugzilla.suse.com/1264019","tags":["report"]},{"url":"https://bugzilla.suse.com/1264030","tags":["report"]},{"url":"https://bugzilla.suse.com/1264032","tags":["report"]},{"url":"https://bugzilla.suse.com/1264033","tags":["report"]},{"url":"https://bugzilla.suse.com/1264035","tags":["report"]},{"url":"https://bugzilla.suse.com/1264039","tags":["report"]},{"url":"https://bugzilla.suse.com/1264041","tags":["report"]},{"url":"https://bugzilla.suse.com/1264044","tags":["report"]},{"url":"https://bugzilla.suse.com/1264048","tags":["report"]},{"url":"https://bugzilla.suse.com/1264053","tags":["report"]},{"url":"https://bugzilla.suse.com/1264065","tags":["report"]},{"url":"https://bugzilla.suse.com/1264070","tags":["report"]},{"url":"https://bugzilla.suse.com/1264071","tags":["report"]},{"url":"https://bugzilla.suse.com/1264073","tags":["report"]},{"url":"https://bugzilla.suse.com/1264074","tags":["report"]},{"url":"https://bugzilla.suse.com/1264075","tags":["report"]},{"url":"https://bugzilla.suse.com/1264076","tags":["report"]},{"url":"https://bugzilla.suse.com/1264079","tags":["report"]},{"url":"https://bugzilla.suse.com/1264080","tags":["report"]},{"url":"https://bugzilla.suse.com/1264084","tags":["report"]},{"url":"https://bugzilla.suse.com/1264087","tags":["report"]},{"url":"https://bugzilla.suse.com/1264088","tags":["report"]},{"url":"https://bugzilla.suse.com/1264089","tags":["report"]},{"url":"https://bugzilla.suse.com/1264090","tags":["report"]},{"url":"https://bugzilla.suse.com/1264093","tags":["report"]},{"url":"https://bugzilla.suse.com/1264100","tags":["report"]},{"url":"https://bugzilla.suse.com/1264101","tags":["report"]},{"url":"https://bugzilla.suse.com/1264110","tags":["report"]},{"url":"https://bugzilla.suse.com/1264116","tags":["report"]},{"url":"https://bugzilla.suse.com/1264117","tags":["report"]},{"url":"https://bugzilla.suse.com/1264121","tags":["report"]},{"url":"https://bugzilla.suse.com/1264122","tags":["report"]},{"url":"https://bugzilla.suse.com/1264124","tags":["report"]},{"url":"https://bugzilla.suse.com/1264125","tags":["report"]},{"url":"https://bugzilla.suse.com/1264129","tags":["report"]},{"url":"https://bugzilla.suse.com/1264137","tags":["report"]},{"url":"https://bugzilla.suse.com/1264142","tags":["report"]},{"url":"https://bugzilla.suse.com/1264184","tags":["report"]},{"url":"https://bugzilla.suse.com/1264188","tags":["report"]},{"url":"https://bugzilla.suse.com/1264189","tags":["report"]},{"url":"https://bugzilla.suse.com/1264190","tags":["report"]},{"url":"https://bugzilla.suse.com/1264197","tags":["report"]},{"url":"https://bugzilla.suse.com/1264228","tags":["report"]},{"url":"https://bugzilla.suse.com/1264235","tags":["report"]},{"url":"https://bugzilla.suse.com/1264237","tags":["report"]},{"url":"https://bugzilla.suse.com/1264247","tags":["report"]},{"url":"https://bugzilla.suse.com/1264257","tags":["report"]},{"url":"https://bugzilla.suse.com/1264267","tags":["report"]},{"url":"https://bugzilla.suse.com/1264296","tags":["report"]},{"url":"https://bugzilla.suse.com/1264303","tags":["report"]},{"url":"https://bugzilla.suse.com/1264308","tags":["report"]},{"url":"https://bugzilla.suse.com/1264313","tags":["report"]},{"url":"https://bugzilla.suse.com/1264317","tags":["report"]},{"url":"https://bugzilla.suse.com/1264319","tags":["report"]},{"url":"https://bugzilla.suse.com/1264321","tags":["report"]},{"url":"https://bugzilla.suse.com/1264322","tags":["report"]},{"url":"https://bugzilla.suse.com/1264331","tags":["report"]},{"url":"https://bugzilla.suse.com/1264336","tags":["report"]},{"url":"https://bugzilla.suse.com/1264338","tags":["report"]},{"url":"https://bugzilla.suse.com/1264339","tags":["report"]},{"url":"https://bugzilla.suse.com/1264340","tags":["report"]},{"url":"https://bugzilla.suse.com/1264365","tags":["report"]},{"url":"https://bugzilla.suse.com/1264377","tags":["report"]},{"url":"https://bugzilla.suse.com/1264379","tags":["report"]},{"url":"https://bugzilla.suse.com/1264386","tags":["report"]},{"url":"https://bugzilla.suse.com/1264387","tags":["report"]},{"url":"https://bugzilla.suse.com/1264388","tags":["report"]},{"url":"https://bugzilla.suse.com/1264414","tags":["report"]},{"url":"https://bugzilla.suse.com/1264416","tags":["report"]},{"url":"https://bugzilla.suse.com/1264417","tags":["report"]},{"url":"https://bugzilla.suse.com/1264418","tags":["report"]},{"url":"https://bugzilla.suse.com/1264419","tags":["report"]},{"url":"https://bugzilla.suse.com/1264422","tags":["report"]},{"url":"https://bugzilla.suse.com/1264423","tags":["report"]},{"url":"https://bugzilla.suse.com/1264424","tags":["report"]},{"url":"https://bugzilla.suse.com/1264425","tags":["report"]},{"url":"https://bugzilla.suse.com/1264430","tags":["report"]},{"url":"https://bugzilla.suse.com/1264431","tags":["report"]},{"url":"https://bugzilla.suse.com/1264436","tags":["report"]},{"url":"https://bugzilla.suse.com/1264442","tags":["report"]},{"url":"https://bugzilla.suse.com/1264446","tags":["report"]},{"url":"https://bugzilla.suse.com/1264451","tags":["report"]},{"url":"https://bugzilla.suse.com/1264452","tags":["report"]},{"url":"https://bugzilla.suse.com/1264473","tags":["report"]},{"url":"https://bugzilla.suse.com/1264475","tags":["report"]},{"url":"https://bugzilla.suse.com/1264476","tags":["report"]},{"url":"https://bugzilla.suse.com/1264477","tags":["report"]},{"url":"https://bugzilla.suse.com/1264479","tags":["report"]},{"url":"https://bugzilla.suse.com/1264480","tags":["report"]},{"url":"https://bugzilla.suse.com/1264482","tags":["report"]},{"url":"https://bugzilla.suse.com/1264520","tags":["report"]},{"url":"https://bugzilla.suse.com/1264526","tags":["report"]},{"url":"https://bugzilla.suse.com/1264530","tags":["report"]},{"url":"https://bugzilla.suse.com/1264531","tags":["report"]},{"url":"https://bugzilla.suse.com/1264534","tags":["report"]},{"url":"https://bugzilla.suse.com/1264537","tags":["report"]},{"url":"https://bugzilla.suse.com/1264538","tags":["report"]},{"url":"https://bugzilla.suse.com/1264539","tags":["report"]},{"url":"https://bugzilla.suse.com/1264540","tags":["report"]},{"url":"https://bugzilla.suse.com/1264543","tags":["report"]},{"url":"https://bugzilla.suse.com/1264551","tags":["report"]},{"url":"https://bugzilla.suse.com/1264553","tags":["report"]},{"url":"https://bugzilla.suse.com/1264558","tags":["report"]},{"url":"https://bugzilla.suse.com/1264560","tags":["report"]},{"url":"https://bugzilla.suse.com/1264562","tags":["report"]},{"url":"https://bugzilla.suse.com/1264564","tags":["report"]},{"url":"https://bugzilla.suse.com/1264566","tags":["report"]},{"url":"https://bugzilla.suse.com/1264584","tags":["report"]},{"url":"https://bugzilla.suse.com/1264590","tags":["report"]},{"url":"https://bugzilla.suse.com/1264592","tags":["report"]},{"url":"https://bugzilla.suse.com/1264594","tags":["report"]},{"url":"https://bugzilla.suse.com/1264598","tags":["report"]},{"url":"https://bugzilla.suse.com/1264600","tags":["report"]},{"url":"https://bugzilla.suse.com/1264601","tags":["report"]},{"url":"https://bugzilla.suse.com/1264613","tags":["report"]},{"url":"https://bugzilla.suse.com/1264615","tags":["report"]},{"url":"https://bugzilla.suse.com/1264616","tags":["report"]},{"url":"https://bugzilla.suse.com/1264618","tags":["report"]},{"url":"https://bugzilla.suse.com/1264620","tags":["report"]},{"url":"https://bugzilla.suse.com/1264626","tags":["report"]},{"url":"https://bugzilla.suse.com/1264630","tags":["report"]},{"url":"https://bugzilla.suse.com/1264631","tags":["report"]},{"url":"https://bugzilla.suse.com/1264633","tags":["report"]},{"url":"https://bugzilla.suse.com/1264634","tags":["report"]},{"url":"https://bugzilla.suse.com/1264637","tags":["report"]},{"url":"https://bugzilla.suse.com/1264640","tags":["report"]},{"url":"https://bugzilla.suse.com/1264642","tags":["report"]},{"url":"https://bugzilla.suse.com/1264644","tags":["report"]},{"url":"https://bugzilla.suse.com/1264645","tags":["report"]},{"url":"https://bugzilla.suse.com/1264646","tags":["report"]},{"url":"https://bugzilla.suse.com/1264647","tags":["report"]},{"url":"https://bugzilla.suse.com/1264649","tags":["report"]},{"url":"https://bugzilla.suse.com/1264651","tags":["report"]},{"url":"https://bugzilla.suse.com/1264668","tags":["report"]},{"url":"https://bugzilla.suse.com/1264671","tags":["report"]},{"url":"https://bugzilla.suse.com/1264677","tags":["report"]},{"url":"https://bugzilla.suse.com/1264678","tags":["report"]},{"url":"https://bugzilla.suse.com/1264712","tags":["report"]},{"url":"https://bugzilla.suse.com/1264725","tags":["report"]},{"url":"https://bugzilla.suse.com/1264731","tags":["report"]},{"url":"https://bugzilla.suse.com/1264739","tags":["report"]},{"url":"https://bugzilla.suse.com/1264746","tags":["report"]},{"url":"https://bugzilla.suse.com/1264748","tags":["report"]},{"url":"https://bugzilla.suse.com/1264758","tags":["report"]},{"url":"https://bugzilla.suse.com/1264768","tags":["report"]},{"url":"https://bugzilla.suse.com/1264779","tags":["report"]},{"url":"https://bugzilla.suse.com/1264780","tags":["report"]},{"url":"https://bugzilla.suse.com/1264781","tags":["report"]},{"url":"https://bugzilla.suse.com/1264782","tags":["report"]},{"url":"https://bugzilla.suse.com/1264783","tags":["report"]},{"url":"https://bugzilla.suse.com/1264785","tags":["report"]},{"url":"https://bugzilla.suse.com/1264788","tags":["report"]},{"url":"https://bugzilla.suse.com/1264791","tags":["report"]},{"url":"https://bugzilla.suse.com/1264793","tags":["report"]},{"url":"https://bugzilla.suse.com/1264795","tags":["report"]},{"url":"https://bugzilla.suse.com/1264801","tags":["report"]},{"url":"https://bugzilla.suse.com/1264803","tags":["report"]},{"url":"https://bugzilla.suse.com/1264805","tags":["report"]},{"url":"https://bugzilla.suse.com/1264809","tags":["report"]},{"url":"https://bugzilla.suse.com/1264815","tags":["report"]},{"url":"https://bugzilla.suse.com/1264816","tags":["report"]},{"url":"https://bugzilla.suse.com/1264819","tags":["report"]},{"url":"https://bugzilla.suse.com/1264821","tags":["report"]},{"url":"https://bugzilla.suse.com/1264822","tags":["report"]},{"url":"https://bugzilla.suse.com/1264826","tags":["report"]},{"url":"https://bugzilla.suse.com/1264827","tags":["report"]},{"url":"https://bugzilla.suse.com/1264830","tags":["report"]},{"url":"https://bugzilla.suse.com/1264844","tags":["report"]},{"url":"https://bugzilla.suse.com/1264982","tags":["report"]},{"url":"https://bugzilla.suse.com/1264987","tags":["report"]},{"url":"https://bugzilla.suse.com/1264988","tags":["report"]},{"url":"https://bugzilla.suse.com/1264991","tags":["report"]},{"url":"https://bugzilla.suse.com/1264993","tags":["report"]},{"url":"https://bugzilla.suse.com/1265009","tags":["report"]},{"url":"https://bugzilla.suse.com/1265019","tags":["report"]},{"url":"https://bugzilla.suse.com/1265032","tags":["report"]},{"url":"https://bugzilla.suse.com/1265035","tags":["report"]},{"url":"https://bugzilla.suse.com/1265037","tags":["report"]},{"url":"https://bugzilla.suse.com/1265041","tags":["report"]},{"url":"https://bugzilla.suse.com/1265046","tags":["report"]},{"url":"https://bugzilla.suse.com/1265047","tags":["report"]},{"url":"https://bugzilla.suse.com/1265054","tags":["report"]},{"url":"https://bugzilla.suse.com/1265058","tags":["report"]},{"url":"https://bugzilla.suse.com/1265074","tags":["report"]},{"url":"https://bugzilla.suse.com/1265078","tags":["report"]},{"url":"https://bugzilla.suse.com/1265080","tags":["report"]},{"url":"https://bugzilla.suse.com/1265086","tags":["report"]},{"url":"https://bugzilla.suse.com/1265089","tags":["report"]},{"url":"https://bugzilla.suse.com/1265090","tags":["report"]},{"url":"https://bugzilla.suse.com/1265092","tags":["report"]},{"url":"https://bugzilla.suse.com/1265093","tags":["report"]},{"url":"https://bugzilla.suse.com/1265096","tags":["report"]},{"url":"https://bugzilla.suse.com/1265100","tags":["report"]},{"url":"https://bugzilla.suse.com/1265101","tags":["report"]},{"url":"https://bugzilla.suse.com/1265102","tags":["report"]},{"url":"https://bugzilla.suse.com/1265105","tags":["report"]},{"url":"https://bugzilla.suse.com/1265122","tags":["report"]},{"url":"https://bugzilla.suse.com/1265126","tags":["report"]},{"url":"https://bugzilla.suse.com/1265133","tags":["report"]},{"url":"https://bugzilla.suse.com/1265138","tags":["report"]},{"url":"https://bugzilla.suse.com/1265144","tags":["report"]},{"url":"https://bugzilla.suse.com/1265240","tags":["report"]},{"url":"https://bugzilla.suse.com/1265247","tags":["report"]},{"url":"https://bugzilla.suse.com/1265249","tags":["report"]},{"url":"https://bugzilla.suse.com/1265251","tags":["report"]},{"url":"https://bugzilla.suse.com/1265254","tags":["report"]},{"url":"https://bugzilla.suse.com/1265257","tags":["report"]},{"url":"https://bugzilla.suse.com/1265264","tags":["report"]},{"url":"https://bugzilla.suse.com/1265449","tags":["report"]},{"url":"https://bugzilla.suse.com/1265627","tags":["report"]},{"url":"https://bugzilla.suse.com/1265928","tags":["report"]},{"url":"https://bugzilla.suse.com/1265999","tags":["report"]},{"url":"https://bugzilla.suse.com/1266000","tags":["report"]},{"url":"https://bugzilla.suse.com/1266009","tags":["report"]},{"url":"https://bugzilla.suse.com/1266393","tags":["report"]},{"url":"https://bugzilla.suse.com/1266399","tags":["report"]},{"url":"https://bugzilla.suse.com/1266402","tags":["report"]},{"url":"https://bugzilla.suse.com/1266411","tags":["report"]},{"url":"https://bugzilla.suse.com/1266412","tags":["report"]},{"url":"https://bugzilla.suse.com/1266467","tags":["report"]},{"url":"https://bugzilla.suse.com/1266468","tags":["report"]},{"url":"https://bugzilla.suse.com/1266470","tags":["report"]},{"url":"https://bugzilla.suse.com/1266677","tags":["report"]},{"url":"https://bugzilla.suse.com/1266679","tags":["report"]},{"url":"https://bugzilla.suse.com/1266684","tags":["report"]},{"url":"https://bugzilla.suse.com/1266685","tags":["report"]},{"url":"https://bugzilla.suse.com/1266688","tags":["report"]},{"url":"https://bugzilla.suse.com/1266690","tags":["report"]},{"url":"https://bugzilla.suse.com/1266692","tags":["report"]},{"url":"https://bugzilla.suse.com/1266694","tags":["report"]},{"url":"https://bugzilla.suse.com/1266695","tags":["report"]},{"url":"https://bugzilla.suse.com/1266703","tags":["report"]},{"url":"https://bugzilla.suse.com/1266706","tags":["report"]},{"url":"https://bugzilla.suse.com/1266707","tags":["report"]},{"url":"https://bugzilla.suse.com/1266712","tags":["report"]},{"url":"https://bugzilla.suse.com/1266714","tags":["report"]},{"url":"https://bugzilla.suse.com/1266715","tags":["report"]},{"url":"https://bugzilla.suse.com/1266716","tags":["report"]},{"url":"https://bugzilla.suse.com/1266721","tags":["report"]},{"url":"https://bugzilla.suse.com/1266729","tags":["report"]},{"url":"https://bugzilla.suse.com/1266730","tags":["report"]},{"url":"https://bugzilla.suse.com/1266732","tags":["report"]},{"url":"https://bugzilla.suse.com/1266735","tags":["report"]},{"url":"https://bugzilla.suse.com/1266736","tags":["report"]},{"url":"https://bugzilla.suse.com/1266739","tags":["report"]},{"url":"https://bugzilla.suse.com/1266741","tags":["report"]},{"url":"https://bugzilla.suse.com/1266743","tags":["report"]},{"url":"https://bugzilla.suse.com/1266744","tags":["report"]},{"url":"https://bugzilla.suse.com/1266751","tags":["report"]},{"url":"https://bugzilla.suse.com/1266755","tags":["report"]},{"url":"https://bugzilla.suse.com/1266757","tags":["report"]},{"url":"https://bugzilla.suse.com/1266758","tags":["report"]},{"url":"https://bugzilla.suse.com/1266762","tags":["report"]},{"url":"https://bugzilla.suse.com/1266767","tags":["report"]},{"url":"https://bugzilla.suse.com/1266774","tags":["report"]},{"url":"https://bugzilla.suse.com/1266775","tags":["report"]},{"url":"https://bugzilla.suse.com/1266780","tags":["report"]},{"url":"https://bugzilla.suse.com/1266806","tags":["report"]},{"url":"https://bugzilla.suse.com/1266813","tags":["report"]},{"url":"https://bugzilla.suse.com/1266831","tags":["report"]},{"url":"https://bugzilla.suse.com/1266832","tags":["report"]},{"url":"https://bugzilla.suse.com/1266834","tags":["report"]},{"url":"https://bugzilla.suse.com/1266835","tags":["report"]},{"url":"https://bugzilla.suse.com/1266836","tags":["report"]},{"url":"https://bugzilla.suse.com/1266839","tags":["report"]},{"url":"https://bugzilla.suse.com/1266841","tags":["report"]},{"url":"https://bugzilla.suse.com/1266842","tags":["report"]},{"url":"https://bugzilla.suse.com/1266846","tags":["report"]},{"url":"https://bugzilla.suse.com/1266850","tags":["report"]},{"url":"https://bugzilla.suse.com/1266854","tags":["report"]},{"url":"https://bugzilla.suse.com/1266855","tags":["report"]},{"url":"https://bugzilla.suse.com/1266858","tags":["report"]},{"url":"https://bugzilla.suse.com/1266863","tags":["report"]},{"url":"https://bugzilla.suse.com/1266864","tags":["report"]},{"url":"https://bugzilla.suse.com/1266869","tags":["report"]},{"url":"https://bugzilla.suse.com/1266870","tags":["report"]},{"url":"https://bugzilla.suse.com/1266872","tags":["report"]},{"url":"https://bugzilla.suse.com/1266876","tags":["report"]},{"url":"https://bugzilla.suse.com/1266879","tags":["report"]},{"url":"https://bugzilla.suse.com/1266880","tags":["report"]},{"url":"https://bugzilla.suse.com/1266882","tags":["report"]},{"url":"https://bugzilla.suse.com/1266886","tags":["report"]},{"url":"https://bugzilla.suse.com/1266890","tags":["report"]},{"url":"https://bugzilla.suse.com/1266891","tags":["report"]},{"url":"https://bugzilla.suse.com/1266894","tags":["report"]},{"url":"https://bugzilla.suse.com/1266896","tags":["report"]},{"url":"https://bugzilla.suse.com/1266898","tags":["report"]},{"url":"https://bugzilla.suse.com/1266900","tags":["report"]},{"url":"https://bugzilla.suse.com/1266904","tags":["report"]},{"url":"https://bugzilla.suse.com/1266908","tags":["report"]},{"url":"https://bugzilla.suse.com/1266910","tags":["report"]},{"url":"https://bugzilla.suse.com/1266913","tags":["report"]},{"url":"https://bugzilla.suse.com/1266917","tags":["report"]},{"url":"https://bugzilla.suse.com/1266918","tags":["report"]},{"url":"https://bugzilla.suse.com/1266920","tags":["report"]},{"url":"https://bugzilla.suse.com/1266930","tags":["report"]},{"url":"https://bugzilla.suse.com/1266931","tags":["report"]},{"url":"https://bugzilla.suse.com/1266932","tags":["report"]},{"url":"https://bugzilla.suse.com/1266934","tags":["report"]},{"url":"https://bugzilla.suse.com/1266935","tags":["report"]},{"url":"https://bugzilla.suse.com/1266939","tags":["report"]},{"url":"https://bugzilla.suse.com/1266947","tags":["report"]},{"url":"https://bugzilla.suse.com/1266969","tags":["report"]},{"url":"https://bugzilla.suse.com/1267021","tags":["report"]},{"url":"https://bugzilla.suse.com/1267025","tags":["report"]},{"url":"https://bugzilla.suse.com/1267027","tags":["report"]},{"url":"https://bugzilla.suse.com/1267198","tags":["report"]},{"url":"https://bugzilla.suse.com/1267203","tags":["report"]},{"url":"https://bugzilla.suse.com/1267204","tags":["report"]},{"url":"https://bugzilla.suse.com/1267209","tags":["report"]},{"url":"https://bugzilla.suse.com/1267210","tags":["report"]},{"url":"https://bugzilla.suse.com/1267213","tags":["report"]},{"url":"https://bugzilla.suse.com/1267222","tags":["report"]},{"url":"https://bugzilla.suse.com/1267226","tags":["report"]},{"url":"https://bugzilla.suse.com/1267234","tags":["report"]},{"url":"https://bugzilla.suse.com/1267236","tags":["report"]},{"url":"https://bugzilla.suse.com/1267251","tags":["report"]},{"url":"https://bugzilla.suse.com/1267367","tags":["report"]},{"url":"https://bugzilla.suse.com/1267371","tags":["report"]},{"url":"https://bugzilla.suse.com/1267375","tags":["report"]},{"url":"https://bugzilla.suse.com/1267380","tags":["report"]},{"url":"https://bugzilla.suse.com/1267381","tags":["report"]},{"url":"https://bugzilla.suse.com/1267384","tags":["report"]},{"url":"https://bugzilla.suse.com/1267419","tags":["report"]},{"url":"https://bugzilla.suse.com/1267432","tags":["report"]},{"url":"https://bugzilla.suse.com/1267435","tags":["report"]},{"url":"https://bugzilla.suse.com/1267436","tags":["report"]},{"url":"https://bugzilla.suse.com/1267439","tags":["report"]},{"url":"https://bugzilla.suse.com/1267445","tags":["report"]},{"url":"https://bugzilla.suse.com/1267448","tags":["report"]},{"url":"https://bugzilla.suse.com/1267449","tags":["report"]},{"url":"https://bugzilla.suse.com/1267466","tags":["report"]},{"url":"https://bugzilla.suse.com/1267468","tags":["report"]},{"url":"https://bugzilla.suse.com/1267470","tags":["report"]},{"url":"https://bugzilla.suse.com/1267472","tags":["report"]},{"url":"https://bugzilla.suse.com/1267473","tags":["report"]},{"url":"https://bugzilla.suse.com/1267479","tags":["report"]},{"url":"https://bugzilla.suse.com/1267491","tags":["report"]},{"url":"https://bugzilla.suse.com/1267495","tags":["report"]},{"url":"https://bugzilla.suse.com/1267496","tags":["report"]},{"url":"https://bugzilla.suse.com/1267497","tags":["report"]},{"url":"https://bugzilla.suse.com/1267502","tags":["report"]},{"url":"https://bugzilla.suse.com/1267524","tags":["report"]},{"url":"https://bugzilla.suse.com/1267555","tags":["report"]},{"url":"https://bugzilla.suse.com/1267565","tags":["report"]},{"url":"https://bugzilla.suse.com/1267567","tags":["report"]},{"url":"https://bugzilla.suse.com/1267570","tags":["report"]},{"url":"https://bugzilla.suse.com/1267571","tags":["report"]},{"url":"https://bugzilla.suse.com/1267583","tags":["report"]},{"url":"https://bugzilla.suse.com/1267584","tags":["report"]},{"url":"https://bugzilla.suse.com/1267592","tags":["report"]},{"url":"https://bugzilla.suse.com/1267594","tags":["report"]},{"url":"https://bugzilla.suse.com/1267595","tags":["report"]},{"url":"https://bugzilla.suse.com/1267596","tags":["report"]},{"url":"https://bugzilla.suse.com/1267597","tags":["report"]},{"url":"https://bugzilla.suse.com/1267600","tags":["report"]},{"url":"https://bugzilla.suse.com/1267611","tags":["report"]},{"url":"https://bugzilla.suse.com/1267615","tags":["report"]},{"url":"https://bugzilla.suse.com/1267616","tags":["report"]},{"url":"https://bugzilla.suse.com/1267621","tags":["report"]},{"url":"https://bugzilla.suse.com/1267623","tags":["report"]},{"url":"https://bugzilla.suse.com/1267627","tags":["report"]},{"url":"https://bugzilla.suse.com/1267629","tags":["report"]},{"url":"https://bugzilla.suse.com/1267630","tags":["report"]},{"url":"https://bugzilla.suse.com/1267632","tags":["report"]},{"url":"https://bugzilla.suse.com/1267636","tags":["report"]},{"url":"https://bugzilla.suse.com/1267638","tags":["report"]},{"url":"https://bugzilla.suse.com/1267643","tags":["report"]},{"url":"https://bugzilla.suse.com/1267646","tags":["report"]},{"url":"https://bugzilla.suse.com/1267648","tags":["report"]},{"url":"https://bugzilla.suse.com/1267649","tags":["report"]},{"url":"https://bugzilla.suse.com/1267651","tags":["report"]},{"url":"https://bugzilla.suse.com/1267656","tags":["report"]},{"url":"https://bugzilla.suse.com/1267657","tags":["report"]},{"url":"https://bugzilla.suse.com/1267658","tags":["report"]},{"url":"https://bugzilla.suse.com/1267659","tags":["report"]},{"url":"https://bugzilla.suse.com/1267661","tags":["report"]},{"url":"https://bugzilla.suse.com/1267662","tags":["report"]},{"url":"https://bugzilla.suse.com/1267663","tags":["report"]},{"url":"https://bugzilla.suse.com/1267666","tags":["report"]},{"url":"https://bugzilla.suse.com/1267667","tags":["report"]},{"url":"https://bugzilla.suse.com/1267669","tags":["report"]},{"url":"https://bugzilla.suse.com/1267673","tags":["report"]},{"url":"https://bugzilla.suse.com/1267676","tags":["report"]},{"url":"https://bugzilla.suse.com/1267677","tags":["report"]},{"url":"https://bugzilla.suse.com/1267678","tags":["report"]},{"url":"https://bugzilla.suse.com/1267680","tags":["report"]},{"url":"https://bugzilla.suse.com/1267682","tags":["report"]},{"url":"https://bugzilla.suse.com/1267683","tags":["report"]},{"url":"https://bugzilla.suse.com/1267689","tags":["report"]},{"url":"https://bugzilla.suse.com/1267690","tags":["report"]},{"url":"https://bugzilla.suse.com/1267691","tags":["report"]},{"url":"https://bugzilla.suse.com/1267693","tags":["report"]},{"url":"https://bugzilla.suse.com/1267701","tags":["report"]},{"url":"https://bugzilla.suse.com/1267702","tags":["report"]},{"url":"https://bugzilla.suse.com/1267704","tags":["report"]},{"url":"https://bugzilla.suse.com/1267712","tags":["report"]},{"url":"https://bugzilla.suse.com/1267714","tags":["report"]},{"url":"https://bugzilla.suse.com/1267715","tags":["report"]},{"url":"https://bugzilla.suse.com/1267719","tags":["report"]},{"url":"https://bugzilla.suse.com/1267725","tags":["report"]},{"url":"https://bugzilla.suse.com/1267726","tags":["report"]},{"url":"https://bugzilla.suse.com/1267728","tags":["report"]},{"url":"https://bugzilla.suse.com/1267738","tags":["report"]},{"url":"https://bugzilla.suse.com/1267918","tags":["report"]},{"url":"https://bugzilla.suse.com/1267919","tags":["report"]},{"url":"https://bugzilla.suse.com/1267922","tags":["report"]},{"url":"https://bugzilla.suse.com/1267927","tags":["report"]},{"url":"https://bugzilla.suse.com/1267932","tags":["report"]},{"url":"https://bugzilla.suse.com/1267939","tags":["report"]},{"url":"https://bugzilla.suse.com/1267943","tags":["report"]},{"url":"https://bugzilla.suse.com/1267948","tags":["report"]},{"url":"https://bugzilla.suse.com/1267952","tags":["report"]},{"url":"https://bugzilla.suse.com/1267953","tags":["report"]},{"url":"https://bugzilla.suse.com/1267954","tags":["report"]},{"url":"https://bugzilla.suse.com/1267968","tags":["report"]},{"url":"https://bugzilla.suse.com/1267983","tags":["report"]},{"url":"https://bugzilla.suse.com/1267986","tags":["report"]},{"url":"https://bugzilla.suse.com/1267987","tags":["report"]},{"url":"https://bugzilla.suse.com/1267990","tags":["report"]},{"url":"https://bugzilla.suse.com/1267991","tags":["report"]},{"url":"https://bugzilla.suse.com/1267995","tags":["report"]},{"url":"https://bugzilla.suse.com/1268024","tags":["report"]},{"url":"https://bugzilla.suse.com/1268029","tags":["report"]},{"url":"https://bugzilla.suse.com/1268030","tags":["report"]},{"url":"https://bugzilla.suse.com/1268031","tags":["report"]},{"url":"https://bugzilla.suse.com/1268038","tags":["report"]},{"url":"https://bugzilla.suse.com/1268051","tags":["report"]},{"url":"https://bugzilla.suse.com/1268220","tags":["report"]},{"url":"https://bugzilla.suse.com/1268221","tags":["report"]},{"url":"https://bugzilla.suse.com/1268222","tags":["report"]},{"url":"https://bugzilla.suse.com/1268223","tags":["report"]},{"url":"https://bugzilla.suse.com/1268307","tags":["report"]},{"url":"https://bugzilla.suse.com/1268659","tags":["report"]},{"url":"https://bugzilla.suse.com/1268966","tags":["report"]},{"url":"https://bugzilla.suse.com/1268967","tags":["report"]},{"url":"https://bugzilla.suse.com/1268981","tags":["report"]},{"url":"https://bugzilla.suse.com/1268983","tags":["report"]},{"url":"https://bugzilla.suse.com/1268985","tags":["report"]},{"url":"https://bugzilla.suse.com/1268987","tags":["report"]},{"url":"https://bugzilla.suse.com/1268994","tags":["report"]},{"url":"https://bugzilla.suse.com/1269001","tags":["report"]},{"url":"https://bugzilla.suse.com/1269002","tags":["report"]},{"url":"https://bugzilla.suse.com/1269003","tags":["report"]},{"url":"https://bugzilla.suse.com/1269024","tags":["report"]},{"url":"https://bugzilla.suse.com/1269025","tags":["report"]},{"url":"https://bugzilla.suse.com/1269027","tags":["report"]},{"url":"https://bugzilla.suse.com/1269030","tags":["report"]},{"url":"https://bugzilla.suse.com/1269081","tags":["report"]},{"url":"https://bugzilla.suse.com/1269090","tags":["report"]},{"url":"https://bugzilla.suse.com/1269092","tags":["report"]},{"url":"https://bugzilla.suse.com/1269094","tags":["report"]},{"url":"https://bugzilla.suse.com/1269095","tags":["report"]},{"url":"https://bugzilla.suse.com/1269098","tags":["report"]},{"url":"https://bugzilla.suse.com/1269100","tags":["report"]},{"url":"https://bugzilla.suse.com/1269104","tags":["report"]},{"url":"https://bugzilla.suse.com/1269106","tags":["report"]},{"url":"https://bugzilla.suse.com/1269107","tags":["report"]},{"url":"https://bugzilla.suse.com/1269111","tags":["report"]},{"url":"https://bugzilla.suse.com/1269112","tags":["report"]},{"url":"https://bugzilla.suse.com/1269115","tags":["report"]},{"url":"https://bugzilla.suse.com/1269116","tags":["report"]},{"url":"https://bugzilla.suse.com/1269117","tags":["report"]},{"url":"https://bugzilla.suse.com/1269118","tags":["report"]},{"url":"https://bugzilla.suse.com/1269119","tags":["report"]},{"url":"https://bugzilla.suse.com/1269124","tags":["report"]},{"url":"https://bugzilla.suse.com/1269125","tags":["report"]},{"url":"https://bugzilla.suse.com/1269131","tags":["report"]},{"url":"https://bugzilla.suse.com/1269132","tags":["report"]},{"url":"https://bugzilla.suse.com/1269133","tags":["report"]},{"url":"https://bugzilla.suse.com/1269138","tags":["report"]},{"url":"https://bugzilla.suse.com/1269141","tags":["report"]},{"url":"https://bugzilla.suse.com/1269153","tags":["report"]},{"url":"https://bugzilla.suse.com/1269154","tags":["report"]},{"url":"https://bugzilla.suse.com/1269157","tags":["report"]},{"url":"https://bugzilla.suse.com/1269158","tags":["report"]},{"url":"https://bugzilla.suse.com/1269166","tags":["report"]},{"url":"https://bugzilla.suse.com/1269170","tags":["report"]},{"url":"https://bugzilla.suse.com/1269172","tags":["report"]},{"url":"https://bugzilla.suse.com/1269174","tags":["report"]},{"url":"https://bugzilla.suse.com/1269175","tags":["report"]},{"url":"https://bugzilla.suse.com/1269177","tags":["report"]},{"url":"https://bugzilla.suse.com/1269178","tags":["report"]},{"url":"https://bugzilla.suse.com/1269181","tags":["report"]},{"url":"https://bugzilla.suse.com/1269184","tags":["report"]},{"url":"https://bugzilla.suse.com/1269185","tags":["report"]},{"url":"https://bugzilla.suse.com/1269186","tags":["report"]},{"url":"https://bugzilla.suse.com/1269187","tags":["report"]},{"url":"https://bugzilla.suse.com/1269190","tags":["report"]},{"url":"https://bugzilla.suse.com/1269195","tags":["report"]},{"url":"https://bugzilla.suse.com/1269198","tags":["report"]},{"url":"https://bugzilla.suse.com/1269227","tags":["report"]},{"url":"https://bugzilla.suse.com/1269229","tags":["report"]},{"url":"https://bugzilla.suse.com/1269232","tags":["report"]},{"url":"https://bugzilla.suse.com/1269233","tags":["report"]},{"url":"https://bugzilla.suse.com/1269235","tags":["report"]},{"url":"https://bugzilla.suse.com/1269236","tags":["report"]},{"url":"https://bugzilla.suse.com/1269239","tags":["report"]},{"url":"https://bugzilla.suse.com/1269240","tags":["report"]},{"url":"https://bugzilla.suse.com/1269241","tags":["report"]},{"url":"https://bugzilla.suse.com/1269244","tags":["report"]},{"url":"https://bugzilla.suse.com/1269245","tags":["report"]},{"url":"https://bugzilla.suse.com/1269254","tags":["report"]},{"url":"https://bugzilla.suse.com/1269255","tags":["report"]},{"url":"https://bugzilla.suse.com/1269257","tags":["report"]},{"url":"https://bugzilla.suse.com/1269258","tags":["report"]},{"url":"https://bugzilla.suse.com/1269270","tags":["report"]},{"url":"https://bugzilla.suse.com/1269272","tags":["report"]},{"url":"https://bugzilla.suse.com/1269273","tags":["report"]},{"url":"https://bugzilla.suse.com/1269281","tags":["report"]},{"url":"https://bugzilla.suse.com/1269283","tags":["report"]},{"url":"https://bugzilla.suse.com/1269286","tags":["report"]},{"url":"https://bugzilla.suse.com/1269289","tags":["report"]},{"url":"https://bugzilla.suse.com/1269290","tags":["report"]},{"url":"https://bugzilla.suse.com/1269304","tags":["report"]},{"url":"https://bugzilla.suse.com/1269307","tags":["report"]},{"url":"https://bugzilla.suse.com/1269314","tags":["report"]},{"url":"https://bugzilla.suse.com/1269318","tags":["report"]},{"url":"https://bugzilla.suse.com/1269337","tags":["report"]},{"url":"https://bugzilla.suse.com/1269362","tags":["report"]},{"url":"https://bugzilla.suse.com/1269364","tags":["report"]},{"url":"https://bugzilla.suse.com/1269376","tags":["report"]},{"url":"https://bugzilla.suse.com/1269378","tags":["report"]},{"url":"https://bugzilla.suse.com/1269383","tags":["report"]},{"url":"https://bugzilla.suse.com/1269385","tags":["report"]},{"url":"https://bugzilla.suse.com/1269386","tags":["report"]},{"url":"https://bugzilla.suse.com/1269391","tags":["report"]},{"url":"https://bugzilla.suse.com/1269403","tags":["report"]},{"url":"https://bugzilla.suse.com/1269404","tags":["report"]},{"url":"https://bugzilla.suse.com/1269410","tags":["report"]},{"url":"https://bugzilla.suse.com/1269414","tags":["report"]},{"url":"https://bugzilla.suse.com/1269415","tags":["report"]},{"url":"https://bugzilla.suse.com/1269505","tags":["report"]},{"url":"https://bugzilla.suse.com/1269511","tags":["report"]},{"url":"https://bugzilla.suse.com/1269512","tags":["report"]},{"url":"https://bugzilla.suse.com/1269513","tags":["report"]},{"url":"https://bugzilla.suse.com/1269556","tags":["report"]},{"url":"https://bugzilla.suse.com/1269557","tags":["report"]},{"url":"https://bugzilla.suse.com/1269574","tags":["report"]},{"url":"https://bugzilla.suse.com/1269577","tags":["report"]},{"url":"https://bugzilla.suse.com/1269588","tags":["report"]},{"url":"https://bugzilla.suse.com/1269637","tags":["report"]},{"url":"https://bugzilla.suse.com/1269643","tags":["report"]},{"url":"https://bugzilla.suse.com/1269644","tags":["report"]},{"url":"https://bugzilla.suse.com/1269652","tags":["report"]},{"url":"https://bugzilla.suse.com/1269654","tags":["report"]},{"url":"https://bugzilla.suse.com/1269658","tags":["report"]},{"url":"https://bugzilla.suse.com/1269659","tags":["report"]},{"url":"https://bugzilla.suse.com/1269660","tags":["report"]},{"url":"https://bugzilla.suse.com/1269661","tags":["report"]},{"url":"https://bugzilla.suse.com/1269663","tags":["report"]},{"url":"https://bugzilla.suse.com/1269669","tags":["report"]},{"url":"https://bugzilla.suse.com/1269670","tags":["report"]},{"url":"https://bugzilla.suse.com/1269672","tags":["report"]},{"url":"https://bugzilla.suse.com/1269674","tags":["report"]},{"url":"https://bugzilla.suse.com/1269675","tags":["report"]},{"url":"https://bugzilla.suse.com/1269677","tags":["report"]},{"url":"https://bugzilla.suse.com/1269678","tags":["report"]},{"url":"https://bugzilla.suse.com/1269681","tags":["report"]},{"url":"https://bugzilla.suse.com/1269682","tags":["report"]},{"url":"https://bugzilla.suse.com/1269684","tags":["report"]},{"url":"https://bugzilla.suse.com/1269687","tags":["report"]},{"url":"https://bugzilla.suse.com/1269688","tags":["report"]},{"url":"https://bugzilla.suse.com/1269689","tags":["report"]},{"url":"https://bugzilla.suse.com/1269694","tags":["report"]},{"url":"https://bugzilla.suse.com/1269709","tags":["report"]},{"url":"https://bugzilla.suse.com/1269711","tags":["report"]},{"url":"https://bugzilla.suse.com/1269712","tags":["report"]},{"url":"https://bugzilla.suse.com/1269713","tags":["report"]},{"url":"https://bugzilla.suse.com/1269714","tags":["report"]},{"url":"https://bugzilla.suse.com/1269719","tags":["report"]},{"url":"https://bugzilla.suse.com/1269722","tags":["report"]},{"url":"https://bugzilla.suse.com/1269724","tags":["report"]},{"url":"https://bugzilla.suse.com/1269726","tags":["report"]},{"url":"https://bugzilla.suse.com/1269727","tags":["report"]},{"url":"https://bugzilla.suse.com/1269731","tags":["report"]},{"url":"https://bugzilla.suse.com/1269733","tags":["report"]},{"url":"https://bugzilla.suse.com/1269734","tags":["report"]},{"url":"https://bugzilla.suse.com/1269770","tags":["report"]},{"url":"https://bugzilla.suse.com/1269772","tags":["report"]},{"url":"https://bugzilla.suse.com/1269773","tags":["report"]},{"url":"https://bugzilla.suse.com/1269786","tags":["report"]},{"url":"https://bugzilla.suse.com/1269796","tags":["report"]},{"url":"https://bugzilla.suse.com/1269797","tags":["report"]},{"url":"https://bugzilla.suse.com/1269799","tags":["report"]},{"url":"https://bugzilla.suse.com/1269801","tags":["report"]},{"url":"https://bugzilla.suse.com/1269808","tags":["report"]},{"url":"https://bugzilla.suse.com/1269810","tags":["report"]},{"url":"https://bugzilla.suse.com/1269811","tags":["report"]},{"url":"https://bugzilla.suse.com/1269817","tags":["report"]},{"url":"https://bugzilla.suse.com/1269819","tags":["report"]},{"url":"https://bugzilla.suse.com/1269826","tags":["report"]},{"url":"https://bugzilla.suse.com/1269877","tags":["report"]},{"url":"https://bugzilla.suse.com/1269879","tags":["report"]},{"url":"https://bugzilla.suse.com/1269884","tags":["report"]},{"url":"https://bugzilla.suse.com/1269886","tags":["report"]},{"url":"https://bugzilla.suse.com/1269889","tags":["report"]},{"url":"https://bugzilla.suse.com/1269898","tags":["report"]},{"url":"https://bugzilla.suse.com/1269899","tags":["report"]},{"url":"https://bugzilla.suse.com/1269902","tags":["report"]},{"url":"https://bugzilla.suse.com/1269950","tags":["report"]},{"url":"https://bugzilla.suse.com/1269961","tags":["report"]},{"url":"https://bugzilla.suse.com/1269964","tags":["report"]},{"url":"https://bugzilla.suse.com/1269973","tags":["report"]},{"url":"https://bugzilla.suse.com/1269976","tags":["report"]},{"url":"https://bugzilla.suse.com/1269979","tags":["report"]},{"url":"https://bugzilla.suse.com/1269984","tags":["report"]},{"url":"https://bugzilla.suse.com/1269986","tags":["report"]},{"url":"https://bugzilla.suse.com/1269988","tags":["report"]},{"url":"https://bugzilla.suse.com/1269990","tags":["report"]},{"url":"https://bugzilla.suse.com/1269991","tags":["report"]},{"url":"https://bugzilla.suse.com/1269993","tags":["report"]},{"url":"https://bugzilla.suse.com/1269994","tags":["report"]},{"url":"https://bugzilla.suse.com/1269995","tags":["report"]},{"url":"https://bugzilla.suse.com/1269996","tags":["report"]},{"url":"https://bugzilla.suse.com/1269997","tags":["report"]},{"url":"https://bugzilla.suse.com/1269998","tags":["report"]},{"url":"https://bugzilla.suse.com/1270058","tags":["report"]},{"url":"https://bugzilla.suse.com/1270059","tags":["report"]},{"url":"https://bugzilla.suse.com/1270102","tags":["report"]},{"url":"https://bugzilla.suse.com/1270112","tags":["report"]},{"url":"https://bugzilla.suse.com/1270113","tags":["report"]},{"url":"https://bugzilla.suse.com/1270132","tags":["report"]},{"url":"https://bugzilla.suse.com/1270241","tags":["report"]},{"url":"https://bugzilla.suse.com/1270244","tags":["report"]},{"url":"https://bugzilla.suse.com/1270248","tags":["report"]},{"url":"https://bugzilla.suse.com/1270249","tags":["report"]},{"url":"https://bugzilla.suse.com/1270257","tags":["report"]},{"url":"https://bugzilla.suse.com/1270260","tags":["report"]},{"url":"https://bugzilla.suse.com/1270302","tags":["report"]},{"url":"https://bugzilla.suse.com/1271290","tags":["report"]},{"url":"https://bugzilla.suse.com/1271291","tags":["report"]},{"url":"https://bugzilla.suse.com/1271349","tags":["report"]},{"url":"https://bugzilla.suse.com/1271366","tags":["report"]},{"url":"https://bugzilla.suse.com/1271368","tags":["report"]},{"url":"https://bugzilla.suse.com/1271395","tags":["report"]},{"url":"https://bugzilla.suse.com/1271526","tags":["report"]},{"url":"https://bugzilla.suse.com/1271717","tags":["report"]},{"url":"https://bugzilla.suse.com/1271731","tags":["report"]},{"url":"https://bugzilla.suse.com/1271813","tags":["report"]},{"url":"https://bugzilla.suse.com/1271818","tags":["report"]},{"url":"https://bugzilla.suse.com/1271820","tags":["report"]},{"url":"https://bugzilla.suse.com/1271825","tags":["report"]},{"url":"https://bugzilla.suse.com/1271826","tags":["report"]},{"url":"https://bugzilla.suse.com/1271827","tags":["report"]},{"url":"https://bugzilla.suse.com/1271830","tags":["report"]},{"url":"https://bugzilla.suse.com/1271831","tags":["report"]},{"url":"https://bugzilla.suse.com/1271832","tags":["report"]},{"url":"https://bugzilla.suse.com/1271833","tags":["report"]},{"url":"https://bugzilla.suse.com/1271834","tags":["report"]},{"url":"https://bugzilla.suse.com/1271835","tags":["report"]},{"url":"https://bugzilla.suse.com/1271858","tags":["report"]},{"url":"https://bugzilla.suse.com/1271859","tags":["report"]},{"url":"https://bugzilla.suse.com/1271866","tags":["report"]},{"url":"https://bugzilla.suse.com/1271869","tags":["report"]},{"url":"https://bugzilla.suse.com/1271870","tags":["report"]},{"url":"https://bugzilla.suse.com/1271899","tags":["report"]},{"url":"https://bugzilla.suse.com/1271904","tags":["report"]},{"url":"https://bugzilla.suse.com/1271906","tags":["report"]},{"url":"https://bugzilla.suse.com/1271908","tags":["report"]},{"url":"https://bugzilla.suse.com/1271912","tags":["report"]},{"url":"https://bugzilla.suse.com/1271937","tags":["report"]},{"url":"https://bugzilla.suse.com/1271955","tags":["report"]},{"url":"https://bugzilla.suse.com/1271964","tags":["report"]},{"url":"https://bugzilla.suse.com/1271967","tags":["report"]},{"url":"https://bugzilla.suse.com/1272146","tags":["report"]},{"url":"https://bugzilla.suse.com/1272150","tags":["report"]},{"url":"https://bugzilla.suse.com/1272176","tags":["report"]},{"url":"https://bugzilla.suse.com/1272179","tags":["report"]},{"url":"https://bugzilla.suse.com/1272180","tags":["report"]},{"url":"https://bugzilla.suse.com/1272183","tags":["report"]},{"url":"https://bugzilla.suse.com/1272184","tags":["report"]},{"url":"https://bugzilla.suse.com/1272187","tags":["report"]},{"url":"https://bugzilla.suse.com/1272194","tags":["report"]},{"url":"https://bugzilla.suse.com/1272197","tags":["report"]},{"url":"https://bugzilla.suse.com/1272204","tags":["report"]},{"url":"https://bugzilla.suse.com/1272207","tags":["report"]},{"url":"https://bugzilla.suse.com/1272211","tags":["report"]},{"url":"https://bugzilla.suse.com/1272242","tags":["report"]},{"url":"https://bugzilla.suse.com/1272246","tags":["report"]},{"url":"https://bugzilla.suse.com/1272263","tags":["report"]},{"url":"https://bugzilla.suse.com/1272268","tags":["report"]},{"url":"https://bugzilla.suse.com/1272282","tags":["report"]},{"url":"https://bugzilla.suse.com/1272296","tags":["report"]},{"url":"https://bugzilla.suse.com/1272359","tags":["report"]},{"url":"https://bugzilla.suse.com/1272360","tags":["report"]},{"url":"https://bugzilla.suse.com/1272361","tags":["report"]},{"url":"https://bugzilla.suse.com/1272362","tags":["report"]},{"url":"https://bugzilla.suse.com/1272373","tags":["report"]},{"url":"https://bugzilla.suse.com/1272374","tags":["report"]},{"url":"https://bugzilla.suse.com/1272380","tags":["report"]},{"url":"https://bugzilla.suse.com/1272381","tags":["report"]},{"url":"https://bugzilla.suse.com/1272383","tags":["report"]},{"url":"https://bugzilla.suse.com/1272384","tags":["report"]},{"url":"https://bugzilla.suse.com/1272387","tags":["report"]},{"url":"https://bugzilla.suse.com/1272389","tags":["report"]},{"url":"https://bugzilla.suse.com/1272406","tags":["report"]},{"url":"https://bugzilla.suse.com/1272422","tags":["report"]},{"url":"https://bugzilla.suse.com/1272434","tags":["report"]},{"url":"https://bugzilla.suse.com/1272462","tags":["report"]},{"url":"https://bugzilla.suse.com/1272466","tags":["report"]},{"url":"https://bugzilla.suse.com/1272467","tags":["report"]},{"url":"https://bugzilla.suse.com/1272468","tags":["report"]},{"url":"https://bugzilla.suse.com/1272470","tags":["report"]},{"url":"https://bugzilla.suse.com/1272471","tags":["report"]},{"url":"https://bugzilla.suse.com/1272472","tags":["report"]},{"url":"https://bugzilla.suse.com/1272474","tags":["report"]},{"url":"https://bugzilla.suse.com/1272478","tags":["report"]},{"url":"https://bugzilla.suse.com/1272480","tags":["report"]},{"url":"https://bugzilla.suse.com/1272482","tags":["report"]},{"url":"https://bugzilla.suse.com/1272483","tags":["report"]},{"url":"https://bugzilla.suse.com/1272489","tags":["report"]},{"url":"https://bugzilla.suse.com/1272492","tags":["report"]},{"url":"https://bugzilla.suse.com/1272494","tags":["report"]},{"url":"https://bugzilla.suse.com/1272499","tags":["report"]},{"url":"https://bugzilla.suse.com/1272500","tags":["report"]},{"url":"https://bugzilla.suse.com/1272504","tags":["report"]},{"url":"https://bugzilla.suse.com/1272505","tags":["report"]},{"url":"https://bugzilla.suse.com/1272514","tags":["report"]},{"url":"https://bugzilla.suse.com/1272517","tags":["report"]},{"url":"https://bugzilla.suse.com/1272522","tags":["report"]},{"url":"https://bugzilla.suse.com/1272523","tags":["report"]},{"url":"https://bugzilla.suse.com/1272524","tags":["report"]},{"url":"https://bugzilla.suse.com/1272568","tags":["report"]},{"url":"https://bugzilla.suse.com/1272572","tags":["report"]},{"url":"https://bugzilla.suse.com/1272573","tags":["report"]},{"url":"https://bugzilla.suse.com/1272578","tags":["report"]},{"url":"https://bugzilla.suse.com/1272591","tags":["report"]},{"url":"https://bugzilla.suse.com/1272607","tags":["report"]},{"url":"https://bugzilla.suse.com/1272610","tags":["report"]},{"url":"https://bugzilla.suse.com/1272612","tags":["report"]},{"url":"https://bugzilla.suse.com/1272613","tags":["report"]},{"url":"https://bugzilla.suse.com/1272614","tags":["report"]},{"url":"https://bugzilla.suse.com/1272617","tags":["report"]},{"url":"https://bugzilla.suse.com/1272618","tags":["report"]},{"url":"https://bugzilla.suse.com/1272620","tags":["report"]},{"url":"https://bugzilla.suse.com/1272642","tags":["report"]},{"url":"https://bugzilla.suse.com/1272646","tags":["report"]},{"url":"https://bugzilla.suse.com/1272659","tags":["report"]},{"url":"https://bugzilla.suse.com/1272662","tags":["report"]},{"url":"https://bugzilla.suse.com/1272664","tags":["report"]},{"url":"https://bugzilla.suse.com/1272665","tags":["report"]},{"url":"https://bugzilla.suse.com/1272668","tags":["report"]},{"url":"https://bugzilla.suse.com/1272670","tags":["report"]},{"url":"https://bugzilla.suse.com/1272671","tags":["report"]},{"url":"https://bugzilla.suse.com/1272675","tags":["report"]},{"url":"https://bugzilla.suse.com/1272678","tags":["report"]},{"url":"https://bugzilla.suse.com/1272680","tags":["report"]},{"url":"https://bugzilla.suse.com/1272681","tags":["report"]},{"url":"https://bugzilla.suse.com/1272682","tags":["report"]},{"url":"https://bugzilla.suse.com/1272685","tags":["report"]},{"url":"https://bugzilla.suse.com/1272686","tags":["report"]},{"url":"https://bugzilla.suse.com/1272689","tags":["report"]},{"url":"https://bugzilla.suse.com/1272690","tags":["report"]},{"url":"https://bugzilla.suse.com/1272691","tags":["report"]},{"url":"https://bugzilla.suse.com/1272693","tags":["report"]},{"url":"https://bugzilla.suse.com/1272694","tags":["report"]},{"url":"https://bugzilla.suse.com/1272706","tags":["report"]},{"url":"https://bugzilla.suse.com/1272781","tags":["report"]},{"url":"https://bugzilla.suse.com/1272785","tags":["report"]},{"url":"https://bugzilla.suse.com/1272787","tags":["report"]},{"url":"https://bugzilla.suse.com/1272797","tags":["report"]},{"url":"https://bugzilla.suse.com/1272800","tags":["report"]},{"url":"https://bugzilla.suse.com/1272807","tags":["report"]},{"url":"https://bugzilla.suse.com/1272836","tags":["report"]},{"url":"https://bugzilla.suse.com/1272843","tags":["report"]},{"url":"https://bugzilla.suse.com/1272847","tags":["report"]},{"url":"https://bugzilla.suse.com/1272848","tags":["report"]},{"url":"https://bugzilla.suse.com/1272850","tags":["report"]},{"url":"https://bugzilla.suse.com/1272853","tags":["report"]},{"url":"https://bugzilla.suse.com/1272858","tags":["report"]},{"url":"https://bugzilla.suse.com/1272863","tags":["report"]},{"url":"https://bugzilla.suse.com/1272867","tags":["report"]},{"url":"https://bugzilla.suse.com/1272871","tags":["report"]},{"url":"https://bugzilla.suse.com/1272891","tags":["report"]},{"url":"https://bugzilla.suse.com/1272892","tags":["report"]},{"url":"https://bugzilla.suse.com/1272897","tags":["report"]},{"url":"https://bugzilla.suse.com/1272903","tags":["report"]},{"url":"https://bugzilla.suse.com/1272907","tags":["report"]},{"url":"https://bugzilla.suse.com/1272920","tags":["report"]},{"url":"https://bugzilla.suse.com/1272973","tags":["report"]},{"url":"https://bugzilla.suse.com/1272993","tags":["report"]},{"url":"https://bugzilla.suse.com/1273005","tags":["report"]},{"url":"https://bugzilla.suse.com/1273023","tags":["report"]},{"url":"https://bugzilla.suse.com/1273035","tags":["report"]},{"url":"https://bugzilla.suse.com/1273044","tags":["report"]},{"url":"https://bugzilla.suse.com/1273053","tags":["report"]},{"url":"https://bugzilla.suse.com/1273054","tags":["report"]},{"url":"https://bugzilla.suse.com/1273117","tags":["report"]},{"url":"https://bugzilla.suse.com/1273231","tags":["report"]},{"url":"https://bugzilla.suse.com/1274072","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-39964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64600","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623068-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623221-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623231-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623237-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623477-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230238","tags":["report"]},{"url":"https://bugzilla.suse.com/1235944","tags":["report"]},{"url":"https://bugzilla.suse.com/1250748","tags":["report"]},{"url":"https://bugzilla.suse.com/1255225","tags":["report"]},{"url":"https://bugzilla.suse.com/1256629","tags":["report"]},{"url":"https://bugzilla.suse.com/1256708","tags":["report"]},{"url":"https://bugzilla.suse.com/1257154","tags":["report"]},{"url":"https://bugzilla.suse.com/1258430","tags":["report"]},{"url":"https://bugzilla.suse.com/1258517","tags":["report"]},{"url":"https://bugzilla.suse.com/1260522","tags":["report"]},{"url":"https://bugzilla.suse.com/1261780","tags":["report"]},{"url":"https://bugzilla.suse.com/1261788","tags":["report"]},{"url":"https://bugzilla.suse.com/1262073","tags":["report"]},{"url":"https://bugzilla.suse.com/1263004","tags":["report"]},{"url":"https://bugzilla.suse.com/1263133","tags":["report"]},{"url":"https://bugzilla.suse.com/1264335","tags":["report"]},{"url":"https://bugzilla.suse.com/1264541","tags":["report"]},{"url":"https://bugzilla.suse.com/1264587","tags":["report"]},{"url":"https://bugzilla.suse.com/1264619","tags":["report"]},{"url":"https://bugzilla.suse.com/1265068","tags":["report"]},{"url":"https://bugzilla.suse.com/1265121","tags":["report"]},{"url":"https://bugzilla.suse.com/1266860","tags":["report"]},{"url":"https://bugzilla.suse.com/1266874","tags":["report"]},{"url":"https://bugzilla.suse.com/1266897","tags":["report"]},{"url":"https://bugzilla.suse.com/1267023","tags":["report"]},{"url":"https://bugzilla.suse.com/1267238","tags":["report"]},{"url":"https://bugzilla.suse.com/1267501","tags":["report"]},{"url":"https://bugzilla.suse.com/1267612","tags":["report"]},{"url":"https://bugzilla.suse.com/1268276","tags":["report"]},{"url":"https://bugzilla.suse.com/1268972","tags":["report"]},{"url":"https://bugzilla.suse.com/1268979","tags":["report"]},{"url":"https://bugzilla.suse.com/1269004","tags":["report"]},{"url":"https://bugzilla.suse.com/1269013","tags":["report"]},{"url":"https://bugzilla.suse.com/1269108","tags":["report"]},{"url":"https://bugzilla.suse.com/1269113","tags":["report"]},{"url":"https://bugzilla.suse.com/1269114","tags":["report"]},{"url":"https://bugzilla.suse.com/1269126","tags":["report"]},{"url":"https://bugzilla.suse.com/1269167","tags":["report"]},{"url":"https://bugzilla.suse.com/1269234","tags":["report"]},{"url":"https://bugzilla.suse.com/1269238","tags":["report"]},{"url":"https://bugzilla.suse.com/1269242","tags":["report"]},{"url":"https://bugzilla.suse.com/1269256","tags":["report"]},{"url":"https://bugzilla.suse.com/1269301","tags":["report"]},{"url":"https://bugzilla.suse.com/1269306","tags":["report"]},{"url":"https://bugzilla.suse.com/1269381","tags":["report"]},{"url":"https://bugzilla.suse.com/1269388","tags":["report"]},{"url":"https://bugzilla.suse.com/1269412","tags":["report"]},{"url":"https://bugzilla.suse.com/1269530","tags":["report"]},{"url":"https://bugzilla.suse.com/1269579","tags":["report"]},{"url":"https://bugzilla.suse.com/1269590","tags":["report"]},{"url":"https://bugzilla.suse.com/1269635","tags":["report"]},{"url":"https://bugzilla.suse.com/1269655","tags":["report"]},{"url":"https://bugzilla.suse.com/1269665","tags":["report"]},{"url":"https://bugzilla.suse.com/1269686","tags":["report"]},{"url":"https://bugzilla.suse.com/1269695","tags":["report"]},{"url":"https://bugzilla.suse.com/1269774","tags":["report"]},{"url":"https://bugzilla.suse.com/1269783","tags":["report"]},{"url":"https://bugzilla.suse.com/1269792","tags":["report"]},{"url":"https://bugzilla.suse.com/1269815","tags":["report"]},{"url":"https://bugzilla.suse.com/1269965","tags":["report"]},{"url":"https://bugzilla.suse.com/1269969","tags":["report"]},{"url":"https://bugzilla.suse.com/1269981","tags":["report"]},{"url":"https://bugzilla.suse.com/1269985","tags":["report"]},{"url":"https://bugzilla.suse.com/1270090","tags":["report"]},{"url":"https://bugzilla.suse.com/1270108","tags":["report"]},{"url":"https://bugzilla.suse.com/1270111","tags":["report"]},{"url":"https://bugzilla.suse.com/1270251","tags":["report"]},{"url":"https://bugzilla.suse.com/1271256","tags":["report"]},{"url":"https://bugzilla.suse.com/1271365","tags":["report"]},{"url":"https://bugzilla.suse.com/1272175","tags":["report"]},{"url":"https://bugzilla.suse.com/1272182","tags":["report"]},{"url":"https://bugzilla.suse.com/1272200","tags":["report"]},{"url":"https://bugzilla.suse.com/1272210","tags":["report"]},{"url":"https://bugzilla.suse.com/1272213","tags":["report"]},{"url":"https://bugzilla.suse.com/1272230","tags":["report"]},{"url":"https://bugzilla.suse.com/1272260","tags":["report"]},{"url":"https://bugzilla.suse.com/1272261","tags":["report"]},{"url":"https://bugzilla.suse.com/1272262","tags":["report"]},{"url":"https://bugzilla.suse.com/1272297","tags":["report"]},{"url":"https://bugzilla.suse.com/1272346","tags":["report"]},{"url":"https://bugzilla.suse.com/1272385","tags":["report"]},{"url":"https://bugzilla.suse.com/1272390","tags":["report"]},{"url":"https://bugzilla.suse.com/1272423","tags":["report"]},{"url":"https://bugzilla.suse.com/1272429","tags":["report"]},{"url":"https://bugzilla.suse.com/1272484","tags":["report"]},{"url":"https://bugzilla.suse.com/1272486","tags":["report"]},{"url":"https://bugzilla.suse.com/1272497","tags":["report"]},{"url":"https://bugzilla.suse.com/1272516","tags":["report"]},{"url":"https://bugzilla.suse.com/1272569","tags":["report"]},{"url":"https://bugzilla.suse.com/1272571","tags":["report"]},{"url":"https://bugzilla.suse.com/1272641","tags":["report"]},{"url":"https://bugzilla.suse.com/1272643","tags":["report"]},{"url":"https://bugzilla.suse.com/1272673","tags":["report"]},{"url":"https://bugzilla.suse.com/1272756","tags":["report"]},{"url":"https://bugzilla.suse.com/1272786","tags":["report"]},{"url":"https://bugzilla.suse.com/1272788","tags":["report"]},{"url":"https://bugzilla.suse.com/1272798","tags":["report"]},{"url":"https://bugzilla.suse.com/1272799","tags":["report"]},{"url":"https://bugzilla.suse.com/1272868","tags":["report"]},{"url":"https://bugzilla.suse.com/1272877","tags":["report"]},{"url":"https://bugzilla.suse.com/1272963","tags":["report"]},{"url":"https://bugzilla.suse.com/1272983","tags":["report"]},{"url":"https://bugzilla.suse.com/1273008","tags":["report"]},{"url":"https://bugzilla.suse.com/1273019","tags":["report"]},{"url":"https://bugzilla.suse.com/1273027","tags":["report"]},{"url":"https://bugzilla.suse.com/1273028","tags":["report"]},{"url":"https://bugzilla.suse.com/1273030","tags":["report"]},{"url":"https://bugzilla.suse.com/1273038","tags":["report"]},{"url":"https://bugzilla.suse.com/1273060","tags":["report"]},{"url":"https://bugzilla.suse.com/1273105","tags":["report"]},{"url":"https://bugzilla.suse.com/1273249","tags":["report"]},{"url":"https://bugzilla.suse.com/1273250","tags":["report"]},{"url":"https://bugzilla.suse.com/1273260","tags":["report"]},{"url":"https://bugzilla.suse.com/1273273","tags":["report"]},{"url":"https://bugzilla.suse.com/1273274","tags":["report"]},{"url":"https://bugzilla.suse.com/1273276","tags":["report"]},{"url":"https://bugzilla.suse.com/1273281","tags":["report"]},{"url":"https://bugzilla.suse.com/1273284","tags":["report"]},{"url":"https://bugzilla.suse.com/1273285","tags":["report"]},{"url":"https://bugzilla.suse.com/1273289","tags":["report"]},{"url":"https://bugzilla.suse.com/1273291","tags":["report"]},{"url":"https://bugzilla.suse.com/1273294","tags":["report"]},{"url":"https://bugzilla.suse.com/1273302","tags":["report"]},{"url":"https://bugzilla.suse.com/1273303","tags":["report"]},{"url":"https://bugzilla.suse.com/1273305","tags":["report"]},{"url":"https://bugzilla.suse.com/1273310","tags":["report"]},{"url":"https://bugzilla.suse.com/1273311","tags":["report"]},{"url":"https://bugzilla.suse.com/1273316","tags":["report"]},{"url":"https://bugzilla.suse.com/1273318","tags":["report"]},{"url":"https://bugzilla.suse.com/1273319","tags":["report"]},{"url":"https://bugzilla.suse.com/1273323","tags":["report"]},{"url":"https://bugzilla.suse.com/1273325","tags":["report"]},{"url":"https://bugzilla.suse.com/1273327","tags":["report"]},{"url":"https://bugzilla.suse.com/1273334","tags":["report"]},{"url":"https://bugzilla.suse.com/1273335","tags":["report"]},{"url":"https://bugzilla.suse.com/1273336","tags":["report"]},{"url":"https://bugzilla.suse.com/1273337","tags":["report"]},{"url":"https://bugzilla.suse.com/1273338","tags":["report"]},{"url":"https://bugzilla.suse.com/1273340","tags":["report"]},{"url":"https://bugzilla.suse.com/1273341","tags":["report"]},{"url":"https://bugzilla.suse.com/1273346","tags":["report"]},{"url":"https://bugzilla.suse.com/1273422","tags":["report"]},{"url":"https://bugzilla.suse.com/1273426","tags":["report"]},{"url":"https://bugzilla.suse.com/1273443","tags":["report"]},{"url":"https://bugzilla.suse.com/1273463","tags":["report"]},{"url":"https://bugzilla.suse.com/1273468","tags":["report"]},{"url":"https://bugzilla.suse.com/1273469","tags":["report"]},{"url":"https://bugzilla.suse.com/1273471","tags":["report"]},{"url":"https://bugzilla.suse.com/1273479","tags":["report"]},{"url":"https://bugzilla.suse.com/1273480","tags":["report"]},{"url":"https://bugzilla.suse.com/1273482","tags":["report"]},{"url":"https://bugzilla.suse.com/1273484","tags":["report"]},{"url":"https://bugzilla.suse.com/1273488","tags":["report"]},{"url":"https://bugzilla.suse.com/1273490","tags":["report"]},{"url":"https://bugzilla.suse.com/1273501","tags":["report"]},{"url":"https://bugzilla.suse.com/1273503","tags":["report"]},{"url":"https://bugzilla.suse.com/1273504","tags":["report"]},{"url":"https://bugzilla.suse.com/1273506","tags":["report"]},{"url":"https://bugzilla.suse.com/1273523","tags":["report"]},{"url":"https://bugzilla.suse.com/1273525","tags":["report"]},{"url":"https://bugzilla.suse.com/1273533","tags":["report"]},{"url":"https://bugzilla.suse.com/1273536","tags":["report"]},{"url":"https://bugzilla.suse.com/1273542","tags":["report"]},{"url":"https://bugzilla.suse.com/1273555","tags":["report"]},{"url":"https://bugzilla.suse.com/1273578","tags":["report"]},{"url":"https://bugzilla.suse.com/1273579","tags":["report"]},{"url":"https://bugzilla.suse.com/1273582","tags":["report"]},{"url":"https://bugzilla.suse.com/1273596","tags":["report"]},{"url":"https://bugzilla.suse.com/1273597","tags":["report"]},{"url":"https://bugzilla.suse.com/1273598","tags":["report"]},{"url":"https://bugzilla.suse.com/1273600","tags":["report"]},{"url":"https://bugzilla.suse.com/1273601","tags":["report"]},{"url":"https://bugzilla.suse.com/1273602","tags":["report"]},{"url":"https://bugzilla.suse.com/1273603","tags":["report"]},{"url":"https://bugzilla.suse.com/1273682","tags":["report"]},{"url":"https://bugzilla.suse.com/1273734","tags":["report"]},{"url":"https://bugzilla.suse.com/1273738","tags":["report"]},{"url":"https://bugzilla.suse.com/1273739","tags":["report"]},{"url":"https://bugzilla.suse.com/1273741","tags":["report"]},{"url":"https://bugzilla.suse.com/1273742","tags":["report"]},{"url":"https://bugzilla.suse.com/1273743","tags":["report"]},{"url":"https://bugzilla.suse.com/1273745","tags":["report"]},{"url":"https://bugzilla.suse.com/1273748","tags":["report"]},{"url":"https://bugzilla.suse.com/1273749","tags":["report"]},{"url":"https://bugzilla.suse.com/1273755","tags":["report"]},{"url":"https://bugzilla.suse.com/1273762","tags":["report"]},{"url":"https://bugzilla.suse.com/1273765","tags":["report"]},{"url":"https://bugzilla.suse.com/1273766","tags":["report"]},{"url":"https://bugzilla.suse.com/1273769","tags":["report"]},{"url":"https://bugzilla.suse.com/1273774","tags":["report"]},{"url":"https://bugzilla.suse.com/1273778","tags":["report"]},{"url":"https://bugzilla.suse.com/1273780","tags":["report"]},{"url":"https://bugzilla.suse.com/1273790","tags":["report"]},{"url":"https://bugzilla.suse.com/1273796","tags":["report"]},{"url":"https://bugzilla.suse.com/1273804","tags":["report"]},{"url":"https://bugzilla.suse.com/1273810","tags":["report"]},{"url":"https://bugzilla.suse.com/1273811","tags":["report"]},{"url":"https://bugzilla.suse.com/1273813","tags":["report"]},{"url":"https://bugzilla.suse.com/1273817","tags":["report"]},{"url":"https://bugzilla.suse.com/1273822","tags":["report"]},{"url":"https://bugzilla.suse.com/1273824","tags":["report"]},{"url":"https://bugzilla.suse.com/1273831","tags":["report"]},{"url":"https://bugzilla.suse.com/1273832","tags":["report"]},{"url":"https://bugzilla.suse.com/1273834","tags":["report"]},{"url":"https://bugzilla.suse.com/1273838","tags":["report"]},{"url":"https://bugzilla.suse.com/1273844","tags":["report"]},{"url":"https://bugzilla.suse.com/1273849","tags":["report"]},{"url":"https://bugzilla.suse.com/1273860","tags":["report"]},{"url":"https://bugzilla.suse.com/1273862","tags":["report"]},{"url":"https://bugzilla.suse.com/1273867","tags":["report"]},{"url":"https://bugzilla.suse.com/1273868","tags":["report"]},{"url":"https://bugzilla.suse.com/1273869","tags":["report"]},{"url":"https://bugzilla.suse.com/1273872","tags":["report"]},{"url":"https://bugzilla.suse.com/1273876","tags":["report"]},{"url":"https://bugzilla.suse.com/1273877","tags":["report"]},{"url":"https://bugzilla.suse.com/1273880","tags":["report"]},{"url":"https://bugzilla.suse.com/1273882","tags":["report"]},{"url":"https://bugzilla.suse.com/1273890","tags":["report"]},{"url":"https://bugzilla.suse.com/1273891","tags":["report"]},{"url":"https://bugzilla.suse.com/1273892","tags":["report"]},{"url":"https://bugzilla.suse.com/1273895","tags":["report"]},{"url":"https://bugzilla.suse.com/1273896","tags":["report"]},{"url":"https://bugzilla.suse.com/1273903","tags":["report"]},{"url":"https://bugzilla.suse.com/1273905","tags":["report"]},{"url":"https://bugzilla.suse.com/1273930","tags":["report"]},{"url":"https://bugzilla.suse.com/1273933","tags":["report"]},{"url":"https://bugzilla.suse.com/1273934","tags":["report"]},{"url":"https://bugzilla.suse.com/1273935","tags":["report"]},{"url":"https://bugzilla.suse.com/1273936","tags":["report"]},{"url":"https://bugzilla.suse.com/1273939","tags":["report"]},{"url":"https://bugzilla.suse.com/1273940","tags":["report"]},{"url":"https://bugzilla.suse.com/1273941","tags":["report"]},{"url":"https://bugzilla.suse.com/1273942","tags":["report"]},{"url":"https://bugzilla.suse.com/1273944","tags":["report"]},{"url":"https://bugzilla.suse.com/1273945","tags":["report"]},{"url":"https://bugzilla.suse.com/1273946","tags":["report"]},{"url":"https://bugzilla.suse.com/1273956","tags":["report"]},{"url":"https://bugzilla.suse.com/1273957","tags":["report"]},{"url":"https://bugzilla.suse.com/1273958","tags":["report"]},{"url":"https://bugzilla.suse.com/1273966","tags":["report"]},{"url":"https://bugzilla.suse.com/1273967","tags":["report"]},{"url":"https://bugzilla.suse.com/1273968","tags":["report"]},{"url":"https://bugzilla.suse.com/1273972","tags":["report"]},{"url":"https://bugzilla.suse.com/1273974","tags":["report"]},{"url":"https://bugzilla.suse.com/1273975","tags":["report"]},{"url":"https://bugzilla.suse.com/1273977","tags":["report"]},{"url":"https://bugzilla.suse.com/1273982","tags":["report"]},{"url":"https://bugzilla.suse.com/1273988","tags":["report"]},{"url":"https://bugzilla.suse.com/1273990","tags":["report"]},{"url":"https://bugzilla.suse.com/1273991","tags":["report"]},{"url":"https://bugzilla.suse.com/1273995","tags":["report"]},{"url":"https://bugzilla.suse.com/1274001","tags":["report"]},{"url":"https://bugzilla.suse.com/1274003","tags":["report"]},{"url":"https://bugzilla.suse.com/1274006","tags":["report"]},{"url":"https://bugzilla.suse.com/1274011","tags":["report"]},{"url":"https://bugzilla.suse.com/1274012","tags":["report"]},{"url":"https://bugzilla.suse.com/1274014","tags":["report"]},{"url":"https://bugzilla.suse.com/1274017","tags":["report"]},{"url":"https://bugzilla.suse.com/1274019","tags":["report"]},{"url":"https://bugzilla.suse.com/1274020","tags":["report"]},{"url":"https://bugzilla.suse.com/1274026","tags":["report"]},{"url":"https://bugzilla.suse.com/1274028","tags":["report"]},{"url":"https://bugzilla.suse.com/1274030","tags":["report"]},{"url":"https://bugzilla.suse.com/1274031","tags":["report"]},{"url":"https://bugzilla.suse.com/1274035","tags":["report"]},{"url":"https://bugzilla.suse.com/1274040","tags":["report"]},{"url":"https://bugzilla.suse.com/1274041","tags":["report"]},{"url":"https://bugzilla.suse.com/1274057","tags":["report"]},{"url":"https://bugzilla.suse.com/1274058","tags":["report"]},{"url":"https://bugzilla.suse.com/1274061","tags":["report"]},{"url":"https://bugzilla.suse.com/1274063","tags":["report"]},{"url":"https://bugzilla.suse.com/1274065","tags":["report"]},{"url":"https://bugzilla.suse.com/1274067","tags":["report"]},{"url":"https://bugzilla.suse.com/1274075","tags":["report"]},{"url":"https://bugzilla.suse.com/1274076","tags":["report"]},{"url":"https://bugzilla.suse.com/1274077","tags":["report"]},{"url":"https://bugzilla.suse.com/1274078","tags":["report"]},{"url":"https://bugzilla.suse.com/1274208","tags":["report"]},{"url":"https://bugzilla.suse.com/1274226","tags":["report"]},{"url":"https://bugzilla.suse.com/1274239","tags":["report"]},{"url":"https://bugzilla.suse.com/1274243","tags":["report"]},{"url":"https://bugzilla.suse.com/1274258","tags":["report"]},{"url":"https://bugzilla.suse.com/1274265","tags":["report"]},{"url":"https://bugzilla.suse.com/1274274","tags":["report"]},{"url":"https://bugzilla.suse.com/1274277","tags":["report"]},{"url":"https://bugzilla.suse.com/1274278","tags":["report"]},{"url":"https://bugzilla.suse.com/1274281","tags":["report"]},{"url":"https://bugzilla.suse.com/1274283","tags":["report"]},{"url":"https://bugzilla.suse.com/1274286","tags":["report"]},{"url":"https://bugzilla.suse.com/1274290","tags":["report"]},{"url":"https://bugzilla.suse.com/1274294","tags":["report"]},{"url":"https://bugzilla.suse.com/1274296","tags":["report"]},{"url":"https://bugzilla.suse.com/1274297","tags":["report"]},{"url":"https://bugzilla.suse.com/1274298","tags":["report"]},{"url":"https://bugzilla.suse.com/1274314","tags":["report"]},{"url":"https://bugzilla.suse.com/1274321","tags":["report"]},{"url":"https://bugzilla.suse.com/1274491","tags":["report"]},{"url":"https://bugzilla.suse.com/1274497","tags":["report"]},{"url":"https://bugzilla.suse.com/1274539","tags":["report"]},{"url":"https://bugzilla.suse.com/1274541","tags":["report"]},{"url":"https://bugzilla.suse.com/1274543","tags":["report"]},{"url":"https://bugzilla.suse.com/1274545","tags":["report"]},{"url":"https://bugzilla.suse.com/1274547","tags":["report"]},{"url":"https://bugzilla.suse.com/1274550","tags":["report"]},{"url":"https://bugzilla.suse.com/1274573","tags":["report"]},{"url":"https://bugzilla.suse.com/1274578","tags":["report"]},{"url":"https://bugzilla.suse.com/1274580","tags":["report"]},{"url":"https://bugzilla.suse.com/1274581","tags":["report"]},{"url":"https://bugzilla.suse.com/1274620","tags":["report"]},{"url":"https://bugzilla.suse.com/1274622","tags":["report"]},{"url":"https://bugzilla.suse.com/1274624","tags":["report"]},{"url":"https://bugzilla.suse.com/1274629","tags":["report"]},{"url":"https://bugzilla.suse.com/1274632","tags":["report"]},{"url":"https://bugzilla.suse.com/1274636","tags":["report"]},{"url":"https://bugzilla.suse.com/1274639","tags":["report"]},{"url":"https://bugzilla.suse.com/1274640","tags":["report"]},{"url":"https://bugzilla.suse.com/1274642","tags":["report"]},{"url":"https://bugzilla.suse.com/1274644","tags":["report"]},{"url":"https://bugzilla.suse.com/1274645","tags":["report"]},{"url":"https://bugzilla.suse.com/1274646","tags":["report"]},{"url":"https://bugzilla.suse.com/1274649","tags":["report"]},{"url":"https://bugzilla.suse.com/1274650","tags":["report"]},{"url":"https://bugzilla.suse.com/1274651","tags":["report"]},{"url":"https://bugzilla.suse.com/1274656","tags":["report"]},{"url":"https://bugzilla.suse.com/1274659","tags":["report"]},{"url":"https://bugzilla.suse.com/1274662","tags":["report"]},{"url":"https://bugzilla.suse.com/1274663","tags":["report"]},{"url":"https://bugzilla.suse.com/1274665","tags":["report"]},{"url":"https://bugzilla.suse.com/1274667","tags":["report"]},{"url":"https://bugzilla.suse.com/1274670","tags":["report"]},{"url":"https://bugzilla.suse.com/1274675","tags":["report"]},{"url":"https://bugzilla.suse.com/1274677","tags":["report"]},{"url":"https://bugzilla.suse.com/1274678","tags":["report"]},{"url":"https://bugzilla.suse.com/1274679","tags":["report"]},{"url":"https://bugzilla.suse.com/1274681","tags":["report"]},{"url":"https://bugzilla.suse.com/1274682","tags":["report"]},{"url":"https://bugzilla.suse.com/1274690","tags":["report"]},{"url":"https://bugzilla.suse.com/1274694","tags":["report"]},{"url":"https://bugzilla.suse.com/1274696","tags":["report"]},{"url":"https://bugzilla.suse.com/1274698","tags":["report"]},{"url":"https://bugzilla.suse.com/1274699","tags":["report"]},{"url":"https://bugzilla.suse.com/1274700","tags":["report"]},{"url":"https://bugzilla.suse.com/1274702","tags":["report"]},{"url":"https://bugzilla.suse.com/1274703","tags":["report"]},{"url":"https://bugzilla.suse.com/1274705","tags":["report"]},{"url":"https://bugzilla.suse.com/1274706","tags":["report"]},{"url":"https://bugzilla.suse.com/1274709","tags":["report"]},{"url":"https://bugzilla.suse.com/1274710","tags":["report"]},{"url":"https://bugzilla.suse.com/1274713","tags":["report"]},{"url":"https://bugzilla.suse.com/1274716","tags":["report"]},{"url":"https://bugzilla.suse.com/1274721","tags":["report"]},{"url":"https://bugzilla.suse.com/1274725","tags":["report"]},{"url":"https://bugzilla.suse.com/1274737","tags":["report"]},{"url":"https://bugzilla.suse.com/1274738","tags":["report"]},{"url":"https://bugzilla.suse.com/1274749","tags":["report"]},{"url":"https://bugzilla.suse.com/1274752","tags":["report"]},{"url":"https://bugzilla.suse.com/1274753","tags":["report"]},{"url":"https://bugzilla.suse.com/1274754","tags":["report"]},{"url":"https://bugzilla.suse.com/1274755","tags":["report"]},{"url":"https://bugzilla.suse.com/1274756","tags":["report"]},{"url":"https://bugzilla.suse.com/1274764","tags":["report"]},{"url":"https://bugzilla.suse.com/1274768","tags":["report"]},{"url":"https://bugzilla.suse.com/1274770","tags":["report"]},{"url":"https://bugzilla.suse.com/1274787","tags":["report"]},{"url":"https://bugzilla.suse.com/1274800","tags":["report"]},{"url":"https://bugzilla.suse.com/1274801","tags":["report"]},{"url":"https://bugzilla.suse.com/1274802","tags":["report"]},{"url":"https://bugzilla.suse.com/1274804","tags":["report"]},{"url":"https://bugzilla.suse.com/1274805","tags":["report"]},{"url":"https://bugzilla.suse.com/1274807","tags":["report"]},{"url":"https://bugzilla.suse.com/1274808","tags":["report"]},{"url":"https://bugzilla.suse.com/1274811","tags":["report"]},{"url":"https://bugzilla.suse.com/1274813","tags":["report"]},{"url":"https://bugzilla.suse.com/1274814","tags":["report"]},{"url":"https://bugzilla.suse.com/1274831","tags":["report"]},{"url":"https://bugzilla.suse.com/1274834","tags":["report"]},{"url":"https://bugzilla.suse.com/1274847","tags":["report"]},{"url":"https://bugzilla.suse.com/1274853","tags":["report"]},{"url":"https://bugzilla.suse.com/1274868","tags":["report"]},{"url":"https://bugzilla.suse.com/1274869","tags":["report"]},{"url":"https://bugzilla.suse.com/1274872","tags":["report"]},{"url":"https://bugzilla.suse.com/1274873","tags":["report"]},{"url":"https://bugzilla.suse.com/1274874","tags":["report"]},{"url":"https://bugzilla.suse.com/1274876","tags":["report"]},{"url":"https://bugzilla.suse.com/1274879","tags":["report"]},{"url":"https://bugzilla.suse.com/1274881","tags":["report"]},{"url":"https://bugzilla.suse.com/1274883","tags":["report"]},{"url":"https://bugzilla.suse.com/1274886","tags":["report"]},{"url":"https://bugzilla.suse.com/1274888","tags":["report"]},{"url":"https://bugzilla.suse.com/1274891","tags":["report"]},{"url":"https://bugzilla.suse.com/1274892","tags":["report"]},{"url":"https://bugzilla.suse.com/1274893","tags":["report"]},{"url":"https://bugzilla.suse.com/1274894","tags":["report"]},{"url":"https://bugzilla.suse.com/1274896","tags":["report"]},{"url":"https://bugzilla.suse.com/1274897","tags":["report"]},{"url":"https://bugzilla.suse.com/1274898","tags":["report"]},{"url":"https://bugzilla.suse.com/1274899","tags":["report"]},{"url":"https://bugzilla.suse.com/1274901","tags":["report"]},{"url":"https://bugzilla.suse.com/1274902","tags":["report"]},{"url":"https://bugzilla.suse.com/1274905","tags":["report"]},{"url":"https://bugzilla.suse.com/1274907","tags":["report"]},{"url":"https://bugzilla.suse.com/1274908","tags":["report"]},{"url":"https://bugzilla.suse.com/1274913","tags":["report"]},{"url":"https://bugzilla.suse.com/1274914","tags":["report"]},{"url":"https://bugzilla.suse.com/1274920","tags":["report"]},{"url":"https://bugzilla.suse.com/1274921","tags":["report"]},{"url":"https://bugzilla.suse.com/1274924","tags":["report"]},{"url":"https://bugzilla.suse.com/1274925","tags":["report"]},{"url":"https://bugzilla.suse.com/1274929","tags":["report"]},{"url":"https://bugzilla.suse.com/1274930","tags":["report"]},{"url":"https://bugzilla.suse.com/1274933","tags":["report"]},{"url":"https://bugzilla.suse.com/1274934","tags":["report"]},{"url":"https://bugzilla.suse.com/1274935","tags":["report"]},{"url":"https://bugzilla.suse.com/1274941","tags":["report"]},{"url":"https://bugzilla.suse.com/1274945","tags":["report"]},{"url":"https://bugzilla.suse.com/1274947","tags":["report"]},{"url":"https://bugzilla.suse.com/1274951","tags":["report"]},{"url":"https://bugzilla.suse.com/1274953","tags":["report"]},{"url":"https://bugzilla.suse.com/1274958","tags":["report"]},{"url":"https://bugzilla.suse.com/1274968","tags":["report"]},{"url":"https://bugzilla.suse.com/1274981","tags":["report"]},{"url":"https://bugzilla.suse.com/1275040","tags":["report"]},{"url":"https://bugzilla.suse.com/1275069","tags":["report"]},{"url":"https://bugzilla.suse.com/1275071","tags":["report"]},{"url":"https://bugzilla.suse.com/1275073","tags":["report"]},{"url":"https://bugzilla.suse.com/1275076","tags":["report"]},{"url":"https://bugzilla.suse.com/1275080","tags":["report"]},{"url":"https://bugzilla.suse.com/1275083","tags":["report"]},{"url":"https://bugzilla.suse.com/1275088","tags":["report"]},{"url":"https://bugzilla.suse.com/1275091","tags":["report"]},{"url":"https://bugzilla.suse.com/1275125","tags":["report"]},{"url":"https://bugzilla.suse.com/1275126","tags":["report"]},{"url":"https://bugzilla.suse.com/1275131","tags":["report"]},{"url":"https://bugzilla.suse.com/1275132","tags":["report"]},{"url":"https://bugzilla.suse.com/1275150","tags":["report"]},{"url":"https://bugzilla.suse.com/1275152","tags":["report"]},{"url":"https://bugzilla.suse.com/1275154","tags":["report"]},{"url":"https://bugzilla.suse.com/1275155","tags":["report"]},{"url":"https://bugzilla.suse.com/1275157","tags":["report"]},{"url":"https://bugzilla.suse.com/1275158","tags":["report"]},{"url":"https://bugzilla.suse.com/1275161","tags":["report"]},{"url":"https://bugzilla.suse.com/1275163","tags":["report"]},{"url":"https://bugzilla.suse.com/1275164","tags":["report"]},{"url":"https://bugzilla.suse.com/1275169","tags":["report"]},{"url":"https://bugzilla.suse.com/1275173","tags":["report"]},{"url":"https://bugzilla.suse.com/1275176","tags":["report"]},{"url":"https://bugzilla.suse.com/1275185","tags":["report"]},{"url":"https://bugzilla.suse.com/1275190","tags":["report"]},{"url":"https://bugzilla.suse.com/1275236","tags":["report"]},{"url":"https://bugzilla.suse.com/1275237","tags":["report"]},{"url":"https://bugzilla.suse.com/1275239","tags":["report"]},{"url":"https://bugzilla.suse.com/1275294","tags":["report"]},{"url":"https://bugzilla.suse.com/1275301","tags":["report"]},{"url":"https://bugzilla.suse.com/1275303","tags":["report"]},{"url":"https://bugzilla.suse.com/1275304","tags":["report"]},{"url":"https://bugzilla.suse.com/1275305","tags":["report"]},{"url":"https://bugzilla.suse.com/1275306","tags":["report"]},{"url":"https://bugzilla.suse.com/1275307","tags":["report"]},{"url":"https://bugzilla.suse.com/1275470","tags":["report"]},{"url":"https://bugzilla.suse.com/1275472","tags":["report"]},{"url":"https://bugzilla.suse.com/1275474","tags":["report"]},{"url":"https://bugzilla.suse.com/1275479","tags":["report"]},{"url":"https://bugzilla.suse.com/1275483","tags":["report"]},{"url":"https://bugzilla.suse.com/1275486","tags":["report"]},{"url":"https://bugzilla.suse.com/1275487","tags":["report"]},{"url":"https://bugzilla.suse.com/1275506","tags":["report"]},{"url":"https://bugzilla.suse.com/1275509","tags":["report"]},{"url":"https://bugzilla.suse.com/1275511","tags":["report"]},{"url":"https://bugzilla.suse.com/1275517","tags":["report"]},{"url":"https://bugzilla.suse.com/1275528","tags":["report"]},{"url":"https://bugzilla.suse.com/1275535","tags":["report"]},{"url":"https://bugzilla.suse.com/1275540","tags":["report"]},{"url":"https://bugzilla.suse.com/1275553","tags":["report"]},{"url":"https://bugzilla.suse.com/1275555","tags":["report"]},{"url":"https://bugzilla.suse.com/1275561","tags":["report"]},{"url":"https://bugzilla.suse.com/1275566","tags":["report"]},{"url":"https://bugzilla.suse.com/1275569","tags":["report"]},{"url":"https://bugzilla.suse.com/1275574","tags":["report"]},{"url":"https://bugzilla.suse.com/1275578","tags":["report"]},{"url":"https://bugzilla.suse.com/1275582","tags":["report"]},{"url":"https://bugzilla.suse.com/1275583","tags":["report"]},{"url":"https://bugzilla.suse.com/1275584","tags":["report"]},{"url":"https://bugzilla.suse.com/1275591","tags":["report"]},{"url":"https://bugzilla.suse.com/1275595","tags":["report"]},{"url":"https://bugzilla.suse.com/1275633","tags":["report"]},{"url":"https://bugzilla.suse.com/1275636","tags":["report"]},{"url":"https://bugzilla.suse.com/1275650","tags":["report"]},{"url":"https://bugzilla.suse.com/1275659","tags":["report"]},{"url":"https://bugzilla.suse.com/1275665","tags":["report"]},{"url":"https://bugzilla.suse.com/1275669","tags":["report"]},{"url":"https://bugzilla.suse.com/1275687","tags":["report"]},{"url":"https://bugzilla.suse.com/1275688","tags":["report"]},{"url":"https://bugzilla.suse.com/1275695","tags":["report"]},{"url":"https://bugzilla.suse.com/1275696","tags":["report"]},{"url":"https://bugzilla.suse.com/1275704","tags":["report"]},{"url":"https://bugzilla.suse.com/1275782","tags":["report"]},{"url":"https://bugzilla.suse.com/1275784","tags":["report"]},{"url":"https://bugzilla.suse.com/1275787","tags":["report"]},{"url":"https://bugzilla.suse.com/1275788","tags":["report"]},{"url":"https://bugzilla.suse.com/1275790","tags":["report"]},{"url":"https://bugzilla.suse.com/1275797","tags":["report"]},{"url":"https://bugzilla.suse.com/1275798","tags":["report"]},{"url":"https://bugzilla.suse.com/1275805","tags":["report"]},{"url":"https://bugzilla.suse.com/1275817","tags":["report"]},{"url":"https://bugzilla.suse.com/1275818","tags":["report"]},{"url":"https://bugzilla.suse.com/1275819","tags":["report"]},{"url":"https://bugzilla.suse.com/1275820","tags":["report"]},{"url":"https://bugzilla.suse.com/1275821","tags":["report"]},{"url":"https://bugzilla.suse.com/1275827","tags":["report"]},{"url":"https://bugzilla.suse.com/1275864","tags":["report"]},{"url":"https://bugzilla.suse.com/1275867","tags":["report"]},{"url":"https://bugzilla.suse.com/1275869","tags":["report"]},{"url":"https://bugzilla.suse.com/1275870","tags":["report"]},{"url":"https://bugzilla.suse.com/1275871","tags":["report"]},{"url":"https://bugzilla.suse.com/1275872","tags":["report"]},{"url":"https://bugzilla.suse.com/1275886","tags":["report"]},{"url":"https://bugzilla.suse.com/1275905","tags":["report"]},{"url":"https://bugzilla.suse.com/1275923","tags":["report"]},{"url":"https://bugzilla.suse.com/1275925","tags":["report"]},{"url":"https://bugzilla.suse.com/1275946","tags":["report"]},{"url":"https://bugzilla.suse.com/1275950","tags":["report"]},{"url":"https://bugzilla.suse.com/1275954","tags":["report"]},{"url":"https://bugzilla.suse.com/1275970","tags":["report"]},{"url":"https://bugzilla.suse.com/1275973","tags":["report"]},{"url":"https://bugzilla.suse.com/1275975","tags":["report"]},{"url":"https://bugzilla.suse.com/1275976","tags":["report"]},{"url":"https://bugzilla.suse.com/1276029","tags":["report"]},{"url":"https://bugzilla.suse.com/1276257","tags":["report"]},{"url":"https://bugzilla.suse.com/1276263","tags":["report"]},{"url":"https://bugzilla.suse.com/1276270","tags":["report"]},{"url":"https://bugzilla.suse.com/1276273","tags":["report"]},{"url":"https://bugzilla.suse.com/1276277","tags":["report"]},{"url":"https://bugzilla.suse.com/1276335","tags":["report"]},{"url":"https://bugzilla.suse.com/1276346","tags":["report"]},{"url":"https://bugzilla.suse.com/1276350","tags":["report"]},{"url":"https://bugzilla.suse.com/1276355","tags":["report"]},{"url":"https://bugzilla.suse.com/1276446","tags":["report"]},{"url":"https://bugzilla.suse.com/1276452","tags":["report"]},{"url":"https://bugzilla.suse.com/1276500","tags":["report"]},{"url":"https://bugzilla.suse.com/1276507","tags":["report"]},{"url":"https://bugzilla.suse.com/1276542","tags":["report"]},{"url":"https://bugzilla.suse.com/1276546","tags":["report"]},{"url":"https://bugzilla.suse.com/1276551","tags":["report"]},{"url":"https://bugzilla.suse.com/1276561","tags":["report"]},{"url":"https://bugzilla.suse.com/1276569","tags":["report"]},{"url":"https://bugzilla.suse.com/1276665","tags":["report"]},{"url":"https://bugzilla.suse.com/1276864","tags":["report"]},{"url":"https://bugzilla.suse.com/1276927","tags":["report"]},{"url":"https://bugzilla.suse.com/1276931","tags":["report"]},{"url":"https://bugzilla.suse.com/1276937","tags":["report"]},{"url":"https://bugzilla.suse.com/1276941","tags":["report"]},{"url":"https://bugzilla.suse.com/1276943","tags":["report"]},{"url":"https://bugzilla.suse.com/1276961","tags":["report"]},{"url":"https://bugzilla.suse.com/1277022","tags":["report"]},{"url":"https://bugzilla.suse.com/1277034","tags":["report"]},{"url":"https://bugzilla.suse.com/1277037","tags":["report"]},{"url":"https://bugzilla.suse.com/1277047","tags":["report"]},{"url":"https://bugzilla.suse.com/1277054","tags":["report"]},{"url":"https://bugzilla.suse.com/1277057","tags":["report"]},{"url":"https://bugzilla.suse.com/1277059","tags":["report"]},{"url":"https://bugzilla.suse.com/1277064","tags":["report"]},{"url":"https://bugzilla.suse.com/1277066","tags":["report"]},{"url":"https://bugzilla.suse.com/1277069","tags":["report"]},{"url":"https://bugzilla.suse.com/1277073","tags":["report"]},{"url":"https://bugzilla.suse.com/1277077","tags":["report"]},{"url":"https://bugzilla.suse.com/1277095","tags":["report"]},{"url":"https://bugzilla.suse.com/1277155","tags":["report"]},{"url":"https://bugzilla.suse.com/1277159","tags":["report"]},{"url":"https://bugzilla.suse.com/1277160","tags":["report"]},{"url":"https://bugzilla.suse.com/1277202","tags":["report"]},{"url":"https://bugzilla.suse.com/1277204","tags":["report"]},{"url":"https://bugzilla.suse.com/1277275","tags":["report"]},{"url":"https://bugzilla.suse.com/1277285","tags":["report"]},{"url":"https://bugzilla.suse.com/1277391","tags":["report"]},{"url":"https://bugzilla.suse.com/1277408","tags":["report"]},{"url":"https://bugzilla.suse.com/1277516","tags":["report"]},{"url":"https://bugzilla.suse.com/1277523","tags":["report"]},{"url":"https://bugzilla.suse.com/1277551","tags":["report"]},{"url":"https://bugzilla.suse.com/1277625","tags":["report"]},{"url":"https://bugzilla.suse.com/1277660","tags":["report"]},{"url":"https://bugzilla.suse.com/1277678","tags":["report"]},{"url":"https://bugzilla.suse.com/1277688","tags":["report"]},{"url":"https://bugzilla.suse.com/1277775","tags":["report"]},{"url":"https://bugzilla.suse.com/1277776","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-57841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80654","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623481-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623528-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623529-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264120-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236344","tags":["report"]},{"url":"https://bugzilla.suse.com/1240957","tags":["report"]},{"url":"https://bugzilla.suse.com/1241363","tags":["report"]},{"url":"https://bugzilla.suse.com/1247180","tags":["report"]},{"url":"https://bugzilla.suse.com/1249104","tags":["report"]},{"url":"https://bugzilla.suse.com/1251130","tags":["report"]},{"url":"https://bugzilla.suse.com/1263052","tags":["report"]},{"url":"https://bugzilla.suse.com/1263864","tags":["report"]},{"url":"https://bugzilla.suse.com/1264010","tags":["report"]},{"url":"https://bugzilla.suse.com/1264012","tags":["report"]},{"url":"https://bugzilla.suse.com/1264643","tags":["report"]},{"url":"https://bugzilla.suse.com/1264740","tags":["report"]},{"url":"https://bugzilla.suse.com/1264807","tags":["report"]},{"url":"https://bugzilla.suse.com/1265220","tags":["report"]},{"url":"https://bugzilla.suse.com/1267505","tags":["report"]},{"url":"https://bugzilla.suse.com/1269140","tags":["report"]},{"url":"https://bugzilla.suse.com/1269313","tags":["report"]},{"url":"https://bugzilla.suse.com/1269402","tags":["report"]},{"url":"https://bugzilla.suse.com/1269647","tags":["report"]},{"url":"https://bugzilla.suse.com/1269888","tags":["report"]},{"url":"https://bugzilla.suse.com/1270263","tags":["report"]},{"url":"https://bugzilla.suse.com/1270268","tags":["report"]},{"url":"https://bugzilla.suse.com/1272351","tags":["report"]},{"url":"https://bugzilla.suse.com/1272502","tags":["report"]},{"url":"https://bugzilla.suse.com/1272804","tags":["report"]},{"url":"https://bugzilla.suse.com/1272893","tags":["report"]},{"url":"https://bugzilla.suse.com/1273032","tags":["report"]},{"url":"https://bugzilla.suse.com/1273033","tags":["report"]},{"url":"https://bugzilla.suse.com/1273036","tags":["report"]},{"url":"https://bugzilla.suse.com/1273037","tags":["report"]},{"url":"https://bugzilla.suse.com/1273134","tags":["report"]},{"url":"https://bugzilla.suse.com/1273277","tags":["report"]},{"url":"https://bugzilla.suse.com/1273280","tags":["report"]},{"url":"https://bugzilla.suse.com/1273460","tags":["report"]},{"url":"https://bugzilla.suse.com/1273465","tags":["report"]},{"url":"https://bugzilla.suse.com/1273581","tags":["report"]},{"url":"https://bugzilla.suse.com/1273679","tags":["report"]},{"url":"https://bugzilla.suse.com/1273681","tags":["report"]},{"url":"https://bugzilla.suse.com/1273797","tags":["report"]},{"url":"https://bugzilla.suse.com/1273801","tags":["report"]},{"url":"https://bugzilla.suse.com/1273812","tags":["report"]},{"url":"https://bugzilla.suse.com/1273859","tags":["report"]},{"url":"https://bugzilla.suse.com/1274008","tags":["report"]},{"url":"https://bugzilla.suse.com/1274009","tags":["report"]},{"url":"https://bugzilla.suse.com/1274010","tags":["report"]},{"url":"https://bugzilla.suse.com/1274055","tags":["report"]},{"url":"https://bugzilla.suse.com/1274071","tags":["report"]},{"url":"https://bugzilla.suse.com/1274264","tags":["report"]},{"url":"https://bugzilla.suse.com/1274267","tags":["report"]},{"url":"https://bugzilla.suse.com/1274295","tags":["report"]},{"url":"https://bugzilla.suse.com/1274783","tags":["report"]},{"url":"https://bugzilla.suse.com/1274835","tags":["report"]},{"url":"https://bugzilla.suse.com/1274849","tags":["report"]},{"url":"https://bugzilla.suse.com/1274877","tags":["report"]},{"url":"https://bugzilla.suse.com/1274895","tags":["report"]},{"url":"https://bugzilla.suse.com/1274906","tags":["report"]},{"url":"https://bugzilla.suse.com/1275081","tags":["report"]},{"url":"https://bugzilla.suse.com/1275139","tags":["report"]},{"url":"https://bugzilla.suse.com/1275141","tags":["report"]},{"url":"https://bugzilla.suse.com/1275146","tags":["report"]},{"url":"https://bugzilla.suse.com/1275148","tags":["report"]},{"url":"https://bugzilla.suse.com/1275149","tags":["report"]},{"url":"https://bugzilla.suse.com/1275156","tags":["report"]},{"url":"https://bugzilla.suse.com/1275192","tags":["report"]},{"url":"https://bugzilla.suse.com/1275300","tags":["report"]},{"url":"https://bugzilla.suse.com/1275519","tags":["report"]},{"url":"https://bugzilla.suse.com/1275557","tags":["report"]},{"url":"https://bugzilla.suse.com/1275572","tags":["report"]},{"url":"https://bugzilla.suse.com/1275656","tags":["report"]},{"url":"https://bugzilla.suse.com/1275737","tags":["report"]},{"url":"https://bugzilla.suse.com/1275789","tags":["report"]},{"url":"https://bugzilla.suse.com/1275822","tags":["report"]},{"url":"https://bugzilla.suse.com/1275823","tags":["report"]},{"url":"https://bugzilla.suse.com/1275928","tags":["report"]},{"url":"https://bugzilla.suse.com/1276552","tags":["report"]},{"url":"https://bugzilla.suse.com/1276577","tags":["report"]},{"url":"https://bugzilla.suse.com/1276912","tags":["report"]},{"url":"https://bugzilla.suse.com/1276913","tags":["report"]},{"url":"https://bugzilla.suse.com/1276944","tags":["report"]},{"url":"https://bugzilla.suse.com/1276955","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-39939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264254-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281691","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90082","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-31557","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-31557","tags":["report"]},{"url":"https://git.kernel.org/linus/2922e3507f6d5caa7f1d07f145e186fc6f317a4e","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8567-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8574-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8574-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8595-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8596-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8595-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8606-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8607-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8608-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8609-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8574-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8595-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8619-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8665-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-21709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-22116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-54505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-54518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-62626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31627","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31642","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31656","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31686","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31698","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31706","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31738","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31780","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45839","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31657","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45864","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45866","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45869","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45870","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64587","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-31557","title":"nvmet: move async event work off nvmet-wq","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026queue-\u003erelease_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u003c--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026ctrl-\u003easync_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u003c--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.","status":"published","published":"2026-04-24T14:35:40.544Z","modified":"2026-10-30T12:24:20.397Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:19:51.277563Z"}],"euvd":[{"id":"EUVD-2026-25450","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026queue-\u003erelease_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u003c--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026ctrl-\u003easync_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u003c--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.","status":"published","published":"2026-04-24T14:35:40Z","modified":"2026-10-30T12:24:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:59:11.516867Z"}],"ghsa":[{"id":"GHSA-7v44-fgx9-96v6","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026queue-\u003erelease_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u003c--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026ctrl-\u003easync_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u003c--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.","status":"published","published":"2026-04-24T15:32:33Z","modified":"2026-10-30T15:32:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T15:14:44.028009Z"}],"nvd":[{"id":"CVE-2026-31557","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026queue-\u003erelease_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u003c--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026ctrl-\u003easync_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u003c--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.","status":"published","published":"2026-04-24T15:16:30.08Z","modified":"2026-10-30T13:18:40.79Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:12:15.867234Z"}],"osv":[{"id":"BELL-CVE-2026-31557","status":"published","published":"2026-04-25T06:08:51.707378Z","modified":"2026-11-04T07:16:04.33458513Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T07:31:49.594962Z"},{"id":"CVE-2026-31557","title":"nvmet: move async event work off nvmet-wq","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026queue-\u003erelease_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u003c--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026ctrl-\u003easync_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u003c--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.","status":"published","published":"2026-04-24T14:35:40.544Z","modified":"2026-11-01T02:30:55.931545895Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:00.861953Z"},{"id":"DEBIAN-CVE-2026-31557","description":"In the Linux kernel, the following vulnerability has been resolved:  nvmet: move async event work off nvmet-wq  For target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work. If nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue completion for the same worker:-  A. Async event work queued on nvmet-wq (prior to disconnect):   nvmet_execute_async_event()      queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)    nvmet_add_async_event()      queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)  B. Full pre-work chain (RDMA CM path):   nvmet_rdma_cm_handler()      nvmet_rdma_queue_disconnect()        __nvmet_rdma_queue_disconnect()          queue_work(nvmet_wq, \u0026queue-\u003erelease_work)            process_one_work()              lock((wq_completion)nvmet-wq)  \u003c--------- 1st              nvmet_rdma_release_queue_work()  C. Recursive path (same worker):   nvmet_rdma_release_queue_work()      nvmet_rdma_free_queue()        nvmet_sq_destroy()          nvmet_ctrl_put()            nvmet_ctrl_free()              flush_work(\u0026ctrl-\u003easync_event_work)                __flush_work()                  touch_wq_lockdep_map()                  lock((wq_completion)nvmet-wq) \u003c--------- 2nd  Lockdep splat:    ============================================   WARNING: possible recursive locking detected   6.19.0-rc3nvme+ #14 Tainted: G                 N   --------------------------------------------   kworker/u192:42/44933 is trying to acquire lock:   ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90    but task is already holding lock:   ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660    3 locks held by kworker/u192:42/44933:    #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660    #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660    #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530    Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]   Call Trace:    __flush_work+0x268/0x530    nvmet_ctrl_free+0x140/0x310 [nvmet]    nvmet_cq_put+0x74/0x90 [nvmet]    nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]    nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]    process_one_work+0x206/0x660    worker_thread+0x184/0x320    kthread+0x10c/0x240    ret_from_fork+0x319/0x390  Move async event work to a dedicated nvmet-aen-wq to avoid reentrant flush on nvmet-wq.","status":"published","published":"2026-04-24T15:16:30.08Z","modified":"2026-10-31T10:01:09.7969349Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.232518Z"},{"id":"OESA-2026-2869","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nArm C1-Ultra, C1-Premium, Neoverse V3 \u0026amp; V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 \u0026amp; X1C, Cortex-A710, Cortex-A78, A78AE \u0026amp; A78C, Cortex-A77, Cortex-A76 \u0026amp; A76A may allow writes to resources owned by a higher exception level.(CVE-2025-10263)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: let smbd_destroy() call disable_work_sync(\u0026amp;info-\u0026gt;post_send_credits_work)\n\nIn smbd_destroy() we may destroy the memory so we better\nwait until post_send_credits_work is no longer pending\nand will never be started again.\n\nI actually just hit the case using rxe:\n\nWARNING: CPU: 0 PID: 138 at drivers/infiniband/sw/rxe/rxe_verbs.c:1032 rxe_post_recv+0x1ee/0x480 [rdma_rxe]\n...\n[ 5305.686979] [    T138]  smbd_post_recv+0x445/0xc10 [cifs]\n[ 5305.687135] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687149] [    T138]  ? __kasan_check_write+0x14/0x30\n[ 5305.687185] [    T138]  ? __pfx_smbd_post_recv+0x10/0x10 [cifs]\n[ 5305.687329] [    T138]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n[ 5305.687356] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687368] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687378] [    T138]  ? _raw_spin_unlock_irqrestore+0x11/0x60\n[ 5305.687389] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687399] [    T138]  ? get_receive_buffer+0x168/0x210 [cifs]\n[ 5305.687555] [    T138]  smbd_post_send_credits+0x382/0x4b0 [cifs]\n[ 5305.687701] [    T138]  ? __pfx_smbd_post_send_credits+0x10/0x10 [cifs]\n[ 5305.687855] [    T138]  ? __pfx___schedule+0x10/0x10\n[ 5305.687865] [    T138]  ? __pfx__raw_spin_lock_irq+0x10/0x10\n[ 5305.687875] [    T138]  ? queue_delayed_work_on+0x8e/0xa0\n[ 5305.687889] [    T138]  process_one_work+0x629/0xf80\n[ 5305.687908] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687917] [    T138]  ? __kasan_check_write+0x14/0x30\n[ 5305.687933] [    T138]  worker_thread+0x87f/0x1570\n...\n\nIt means rxe_post_recv was called after rdma_destroy_qp().\nThis happened because put_receive_buffer() was triggered\nby ib_drain_qp() and called:\nqueue_work(info-\u0026gt;workqueue, \u0026amp;info-\u0026gt;post_send_credits_work);(CVE-2025-39932)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nriscv: Sanitize syscall table indexing under speculation\n\nThe syscall number is a user-controlled value used to index into the\nsyscall table. Use array_index_nospec() to clamp this value after the\nbounds check to prevent speculative out-of-bounds access and subsequent\ndata leakage via cache side channels.(CVE-2025-71203)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme-fc: release admin tagset if init fails\n\nnvme_fabrics creates an NVMe/FC controller in following path:\n\n    nvmf_dev_write()\n      -\u0026gt; nvmf_create_ctrl()\n        -\u0026gt; nvme_fc_create_ctrl()\n          -\u0026gt; nvme_fc_init_ctrl()\n\nnvme_fc_init_ctrl() allocates the admin blk-mq resources right after\nnvme_add_ctrl() succeeds.  If any of the subsequent steps fail (changing\nthe controller state, scheduling connect work, etc.), we jump to the\nfail_ctrl path, which tears down the controller references but never\nfrees the admin queue/tag set.  The leaked blk-mq allocations match the\nkmemleak report seen during blktests nvme/fc.\n\nCheck ctrl-\u0026gt;ctrl.admin_tagset in the fail_ctrl path and call\nnvme_remove_admin_tag_set() when it is set so that all admin queue\nallocations are reclaimed whenever controller setup aborts.(CVE-2026-23261)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: io: Extract user memory type in ioremap_prot()\n\nThe only caller of ioremap_prot() outside of the generic ioremap()\nimplementation is generic_access_phys(), which passes a \u0026apos;pgprot_t\u0026apos; value\ndetermined from the user mapping of the target \u0026apos;pfn\u0026apos; being accessed by\nthe kernel. On arm64, the \u0026apos;pgprot_t\u0026apos; contains all of the non-address\nbits from the pte, including the permission controls, and so we end up\nreturning a new user mapping from ioremap_prot() which faults when\naccessed from the kernel on systems with PAN:\n\n  | Unable to handle kernel read from unreadable memory at virtual address ffff80008ea89000\n  | ...\n  | Call trace:\n  |   __memcpy_fromio+0x80/0xf8\n  |   generic_access_phys+0x20c/0x2b8\n  |   __access_remote_vm+0x46c/0x5b8\n  |   access_remote_vm+0x18/0x30\n  |   environ_read+0x238/0x3e8\n  |   vfs_read+0xe4/0x2b0\n  |   ksys_read+0xcc/0x178\n  |   __arm64_sys_read+0x4c/0x68\n\nExtract only the memory type from the user \u0026apos;pgprot_t\u0026apos; in ioremap_prot()\nand assert that we\u0026apos;re being passed a user mapping, to protect us against\nany changes in future that may require additional handling. To avoid\nfalsely flagging users of ioremap(), provide our own ioremap() macro\nwhich simply wraps __ioremap_prot().(CVE-2026-23346)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz\n\nThe only user of frag_size field in XDP RxQ info is\nbpf_xdp_frags_increase_tail(). It clearly expects whole buff size instead\nof DMA write size. Different assumptions in ice driver configuration lead\nto negative tailroom.\n\nThis allows to trigger kernel panic, when using\nXDP_ADJUST_TAIL_GROW_MULTI_BUFF xskxceiver test and changing packet size to\n6912 and the requested offset to a huge value, e.g.\nXSK_UMEM__MAX_FRAME_SIZE * 100.\n\nDue to other quirks of the ZC configuration in ice, panic is not observed\nin ZC mode, but tailroom growing still fails when it should not.\n\nUse fill queue buffer truesize instead of DMA write size in XDP RxQ info.\nFix ZC mode too by using the new helper.(CVE-2026-23377)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_expect: use expect-\u0026gt;helper\n\nUse expect-\u0026gt;helper in ctnetlink and /proc to dump the helper name.\nUsing nfct_help() without holding a reference to the master conntrack\nis unsafe.\n\nUse exp-\u0026gt;master-\u0026gt;helper in ctnetlink path if userspace does not provide\nan explicit helper when creating an expectation to retain the existing\nbehaviour. The ctnetlink expectation path holds the reference on the\nmaster conntrack and nf_conntrack_expect lock and the nfnetlink glue\npath refers to the master ct that is attached to the skb.(CVE-2026-31414)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix OOB write in QUERY_INFO for compound requests\n\nWhen a compound request such as READ + QUERY_INFO(Security) is received,\nand the first command (READ) consumes most of the response buffer,\nksmbd could write beyond the allocated buffer while building a security\ndescriptor.\n\nThe root cause was that smb2_get_info_sec() checked buffer space using\nppntsd_size from xattr, while build_sec_desc() often synthesized a\nsignificantly larger descriptor from POSIX ACLs.\n\nThis patch introduces smb_acl_sec_desc_scratch_len() to accurately\ncompute the final descriptor size beforehand, performs proper buffer\nchecking with smb2_calc_max_out_buf_len(), and uses exact-sized\nallocation + iov pinning.(CVE-2026-31432)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix leaking event log memory\n\nDuring the device remove process, the device is reset, causing the\nconfiguration registers to go back to their default state, which is\nzero. As the driver is checking if the event log support was enabled\nbefore deallocating, it will fail if a reset happened before.\n\nDo not check if the support was enabled, the check for \u0026apos;idxd-\u0026gt;evl\u0026apos;\nbeing valid (only allocated if the HW capability is available) is\nenough.(CVE-2026-31440)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix crash when the event log is disabled\n\nIf reporting errors to the event log is not supported by the hardware,\nand an error that causes Function Level Reset (FLR) is received, the\ndriver will try to restore the event log even if it was not allocated.\n\nAlso, only try to free the event log if it was properly allocated.(CVE-2026-31443)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: avoid dereferencing log items after push callbacks\n\nAfter xfsaild_push_item() calls iop_push(), the log item may have been\nfreed if the AIL lock was dropped during the push. Background inode\nreclaim or the dquot shrinker can free the log item while the AIL lock\nis not held, and the tracepoints in the switch statement dereference\nthe log item after iop_push() returns.\n\nFix this by capturing the log item type, flags, and LSN before calling\nxfsaild_push_item(), and introducing a new xfs_ail_push_class trace\nevent class that takes these pre-captured values and the ailp pointer\ninstead of the log item pointer.(CVE-2026-31453)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: fix folio isn\u0026apos;t locked in softleaf_to_folio()\n\nOn arm64 server, we found folio that get from migration entry isn\u0026apos;t locked\nin softleaf_to_folio().  This issue triggers when mTHP splitting and\nzap_nonpresent_ptes() races, and the root cause is lack of memory barrier\nin softleaf_to_folio().  The race is as follows:\n\n\tCPU0                                             CPU1\n\ndeferred_split_scan()                              zap_nonpresent_ptes()\n  lock folio\n  split_folio()\n    unmap_folio()\n      change ptes to migration entries\n    __split_folio_to_order()                         softleaf_to_folio()\n      set flags(including PG_locked) for tail pages    folio = pfn_folio(softleaf_to_pfn(entry))\n      smp_wmb()                                        VM_WARN_ON_ONCE(!folio_test_locked(folio))\n      prep_compound_page() for tail pages\n\nIn __split_folio_to_order(), smp_wmb() guarantees page flags of tail pages\nare visible before the tail page becomes non-compound.  smp_wmb() should\nbe paired with smp_rmb() in softleaf_to_folio(), which is missed.  As a\nresult, if zap_nonpresent_ptes() accesses migration entry that stores tail\npfn, softleaf_to_folio() may see the updated compound_head of tail page\nbefore page-\u0026gt;flags.\n\nThis issue will trigger VM_WARN_ON_ONCE() in pfn_swap_entry_folio()\nbecause of the race between folio split and zap_nonpresent_ptes()\nleading to a folio incorrectly undergoing modification without a folio\nlock being held.\n\nThis is a BUG_ON() before commit 93976a20345b (\u0026quot;mm: eliminate further\nswapops predicates\u0026quot;), which in merged in v6.19-rc1.\n\nTo fix it, add missing smp_rmb() if the softleaf entry is migration entry\nin softleaf_to_folio() and softleaf_to_page().\n\n[(CVE-2026-31466)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: Avoid releasing netdev before teardown completes\n\nThe patch cited in the Fixes tag below changed the teardown code for\nOVS ports to no longer unconditionally take the RTNL. After this change,\nthe netdev_destroy() callback can proceed immediately to the call_rcu()\ninvocation if the IFF_OVS_DATAPATH flag is already cleared on the\nnetdev.\n\nThe ovs_netdev_detach_dev() function clears the flag before completing\nthe unregistration, and if it gets preempted after clearing the flag (as\ncan happen on an -rt kernel), netdev_destroy() can complete and the\ndevice can be freed before the unregistration completes. This leads to a\nsplat like:\n\n[  998.393867] Oops: general protection fault, probably for non-canonical address 0xff00000001000239: 0000 [#1] SMP PTI\n[  998.393877] CPU: 42 UID: 0 PID: 55177 Comm: ip Kdump: loaded Not tainted 6.12.0-211.1.1.el10_2.x86_64+rt #1 PREEMPT_RT\n[  998.393886] Hardware name: Dell Inc. PowerEdge R740/0JMK61, BIOS 2.24.0 03/27/2025\n[  998.393889] RIP: 0010:dev_set_promiscuity+0x8d/0xa0\n[  998.393901] Code: 00 00 75 d8 48 8b 53 08 48 83 ba b0 02 00 00 00 75 ca 48 83 c4 08 5b c3 cc cc cc cc 48 83 bf 48 09 00 00 00 75 91 48 8b 47 08 \u0026lt;48\u0026gt; 83 b8 b0 02 00 00 00 74 97 eb 81 0f 1f 80 00 00 00 00 90 90 90\n[  998.393906] RSP: 0018:ffffce5864a5f6a0 EFLAGS: 00010246\n[  998.393912] RAX: ff00000000ffff89 RBX: ffff894d0adf5a05 RCX: 0000000000000000\n[  998.393917] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff894d0adf5a05\n[  998.393921] RBP: ffff894d19252000 R08: ffff894d19252000 R09: 0000000000000000\n[  998.393924] R10: ffff894d19252000 R11: ffff894d192521b8 R12: 0000000000000006\n[  998.393927] R13: ffffce5864a5f738 R14: 00000000ffffffe2 R15: 0000000000000000\n[  998.393931] FS:  00007fad61971800(0000) GS:ffff894cc0140000(0000) knlGS:0000000000000000\n[  998.393936] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  998.393940] CR2: 000055df0a2a6e40 CR3: 000000011c7fe003 CR4: 00000000007726f0\n[  998.393944] PKRU: 55555554\n[  998.393946] Call Trace:\n[  998.393949]  \u0026lt;TASK\u0026gt;\n[  998.393952]  ? show_trace_log_lvl+0x1b0/0x2f0\n[  998.393961]  ? show_trace_log_lvl+0x1b0/0x2f0\n[  998.393975]  ? dp_device_event+0x41/0x80 [openvswitch]\n[  998.394009]  ? __die_body.cold+0x8/0x12\n[  998.394016]  ? die_addr+0x3c/0x60\n[  998.394027]  ? exc_general_protection+0x16d/0x390\n[  998.394042]  ? asm_exc_general_protection+0x26/0x30\n[  998.394058]  ? dev_set_promiscuity+0x8d/0xa0\n[  998.394066]  ? ovs_netdev_detach_dev+0x3a/0x80 [openvswitch]\n[  998.394092]  dp_device_event+0x41/0x80 [openvswitch]\n[  998.394102]  notifier_call_chain+0x5a/0xd0\n[  998.394106]  unregister_netdevice_many_notify+0x51b/0xa60\n[  998.394110]  rtnl_dellink+0x169/0x3e0\n[  998.394121]  ? rt_mutex_slowlock.constprop.0+0x95/0xd0\n[  998.394125]  rtnetlink_rcv_msg+0x142/0x3f0\n[  998.394128]  ? avc_has_perm_noaudit+0x69/0xf0\n[  998.394130]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10\n[  998.394132]  netlink_rcv_skb+0x50/0x100\n[  998.394138]  netlink_unicast+0x292/0x3f0\n[  998.394141]  netlink_sendmsg+0x21b/0x470\n[  998.394145]  ____sys_sendmsg+0x39d/0x3d0\n[  998.394149]  ___sys_sendmsg+0x9a/0xe0\n[  998.394156]  __sys_sendmsg+0x7a/0xd0\n[  998.394160]  do_syscall_64+0x7f/0x170\n[  998.394162]  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[  998.394165] RIP: 0033:0x7fad61bf4724\n[  998.394188] Code: 89 02 b8 ff ff ff ff eb bb 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 80 3d c5 e9 0c 00 00 74 13 b8 2e 00 00 00 0f 05 \u0026lt;48\u0026gt; 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 89 54 24 1c 48 89\n[  998.394189] RSP: 002b:00007ffd7e2f7cb8 EFLAGS: 00000202 ORIG_RAX: 000000000000002e\n[  998.394191] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fad61bf4724\n[  998.394193] RDX: 0000000000000000 RSI: 00007ffd7e2f7d20 RDI: 0000000000000003\n[  998.394194] RBP: 00007ffd7e2f7d90 R08: 0000000000000010 R09: 000000000000003f\n[  998.394195] R10: 000055df11558010 R11: 0000000000000202 R12: 00007ffd7e2\n---truncated---(CVE-2026-31508)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Fix static_branch_dec() underflow for aql_disable.\n\nsyzbot reported static_branch_dec() underflow in aql_enable_write(). [0]\n\nThe problem is that aql_enable_write() does not serialise concurrent\nwrite()s to the debugfs.\n\naql_enable_write() checks static_key_false(\u0026amp;aql_disable.key) and\nlater calls static_branch_inc() or static_branch_dec(), but the\nstate may change between the two calls.\n\naql_disable does not need to track inc/dec.\n\nLet\u0026apos;s use static_branch_enable() and static_branch_disable().\n\n[0]:\nval == 0\nWARNING: kernel/jump_label.c:311 at __static_key_slow_dec_cpuslocked.part.0+0x107/0x120 kernel/jump_label.c:311, CPU#0: syz.1.3155/20288\nModules linked in:\nCPU: 0 UID: 0 PID: 20288 Comm: syz.1.3155 Tainted: G     U       L      syzkaller #0 PREEMPT(full)\nTainted: [U]=USER, [L]=SOFTLOCKUP\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026\nRIP: 0010:__static_key_slow_dec_cpuslocked.part.0+0x107/0x120 kernel/jump_label.c:311\nCode: f2 c9 ff 5b 5d c3 cc cc cc cc e8 54 f2 c9 ff 48 89 df e8 ac f9 ff ff eb ad e8 45 f2 c9 ff 90 0f 0b 90 eb a2 e8 3a f2 c9 ff 90 \u0026lt;0f\u0026gt; 0b 90 eb 97 48 89 df e8 5c 4b 33 00 e9 36 ff ff ff 0f 1f 80 00\nRSP: 0018:ffffc9000b9f7c10 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: ffffffff9b3e5d40 RCX: ffffffff823c57b4\nRDX: ffff8880285a0000 RSI: ffffffff823c5846 RDI: ffff8880285a0000\nRBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000a\nR13: 1ffff9200173ef88 R14: 0000000000000001 R15: ffffc9000b9f7e98\nFS:  00007f530dd726c0(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000200000001140 CR3: 000000007cc4a000 CR4: 00000000003526f0\nCall Trace:\n \u0026lt;TASK\u0026gt;\n __static_key_slow_dec_cpuslocked kernel/jump_label.c:297 [inline]\n __static_key_slow_dec kernel/jump_label.c:321 [inline]\n static_key_slow_dec+0x7c/0xc0 kernel/jump_label.c:336\n aql_enable_write+0x2b2/0x310 net/mac80211/debugfs.c:343\n short_proxy_write+0x133/0x1a0 fs/debugfs/file.c:383\n vfs_write+0x2aa/0x1070 fs/read_write.c:684\n ksys_pwrite64 fs/read_write.c:793 [inline]\n __do_sys_pwrite64 fs/read_write.c:801 [inline]\n __se_sys_pwrite64 fs/read_write.c:798 [inline]\n __x64_sys_pwrite64+0x1eb/0x250 fs/read_write.c:798\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f530cf9aeb9\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u0026lt;48\u0026gt; 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f530dd72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012\nRAX: ffffffffffffffda RBX: 00007f530d215fa0 RCX: 00007f530cf9aeb9\nRDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000010\nRBP: 00007f530d008c1f R08: 0000000000000000 R09: 0000000000000000\nR10: 4200000000000005 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f530d216038 R14: 00007f530d215fa0 R15: 00007ffde89fb978\n \u0026lt;/TASK\u0026gt;(CVE-2026-31551)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u0026gt;async_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026amp;ctrl-\u0026gt;async_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026amp;ctrl-\u0026gt;async_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026amp;queue-\u0026gt;release_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u0026lt;--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026amp;ctrl-\u0026gt;async_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u0026lt;--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026amp;queue-\u0026gt;release_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.(CVE-2026-31557)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbcache: fix cached_dev.sb_bio use-after-free and crash\n\nIn our production environment, we have received multiple crash reports\nregarding libceph, which have caught our attention:\n\n```\n[6888366.280350] Call Trace:\n[6888366.280452]  blk_update_request+0x14e/0x370\n[6888366.280561]  blk_mq_end_request+0x1a/0x130\n[6888366.280671]  rbd_img_handle_request+0x1a0/0x1b0 [rbd]\n[6888366.280792]  rbd_obj_handle_request+0x32/0x40 [rbd]\n[6888366.280903]  __complete_request+0x22/0x70 [libceph]\n[6888366.281032]  osd_dispatch+0x15e/0xb40 [libceph]\n[6888366.281164]  ? inet_recvmsg+0x5b/0xd0\n[6888366.281272]  ? ceph_tcp_recvmsg+0x6f/0xa0 [libceph]\n[6888366.281405]  ceph_con_process_message+0x79/0x140 [libceph]\n[6888366.281534]  ceph_con_v1_try_read+0x5d7/0xf30 [libceph]\n[6888366.281661]  ceph_con_workfn+0x329/0x680 [libceph]\n```\n\nAfter analyzing the coredump file, we found that the address of\ndc-\u0026gt;sb_bio has been freed. We know that cached_dev is only freed when it\nis stopped.\n\nSince sb_bio is a part of struct cached_dev, rather than an alloc every\ntime.  If the device is stopped while writing to the superblock, the\nreleased address will be accessed at endio.\n\nThis patch hopes to wait for sb_write to complete in cached_dev_free.\n\nIt should be noted that we analyzed the cause of the problem, then tell\nall details to the QWEN and adopted the modifications it made.(CVE-2026-31580)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: hold dev ref until after transport_finish NF_HOOK\n\nAfter async crypto completes, xfrm_input_resume() calls dev_put()\nimmediately on re-entry before the skb reaches transport_finish.\nThe skb-\u0026gt;dev pointer is then used inside NF_HOOK and its okfn,\nwhich can race with device teardown.\n\nRemove the dev_put from the async resumption entry and instead\ndrop the reference after the NF_HOOK call in transport_finish,\nusing a saved device pointer since NF_HOOK may consume the skb.\nThis covers NF_DROP, NF_QUEUE and NF_STOLEN paths that skip\nthe okfn.\n\nFor non-transport exits (decaps, gro, drop) and secondary\nasync return points, release the reference inline when\nasync is set.(CVE-2026-31663)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: clear trailing padding in build_polexpire()\n\nbuild_expire() clears the trailing padding bytes of struct\nxfrm_user_expire after setting the hard field via memset_after(),\nbut the analogous function build_polexpire() does not do this for\nstruct xfrm_user_polexpire.\n\nThe padding bytes after the __u8 hard field are left\nuninitialized from the heap allocation, and are then sent to\nuserspace via netlink multicast to XFRMNLGRP_EXPIRE listeners,\nleaking kernel heap memory contents.\n\nAdd the missing memset_after() call, matching build_expire().(CVE-2026-31664)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_multiport: validate range encoding in checkentry\n\nports_match_v1() treats any non-zero pflags entry as the start of a\nport range and unconditionally consumes the next ports[] element as\nthe range end.\n\nThe checkentry path currently validates protocol, flags and count, but\nit does not validate the range encoding itself. As a result, malformed\nrules can mark the last slot as a range start or place two range starts\nback to back, leaving ports_match_v1() to step past the last valid\nports[] element while interpreting the rule.\n\nReject malformed multiport v1 rules in checkentry by validating that\neach range start has a following element and that the following element\nis not itself marked as another range start.(CVE-2026-31681)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate owner of durable handle on reconnect\n\nCurrently, ksmbd does not verify if the user attempting to reconnect\nto a durable handle is the same user who originally opened the file.\nThis allows any authenticated user to hijack an orphaned durable handle\nby predicting or brute-forcing the persistent ID.\n\nAccording to MS-SMB2, the server MUST verify that the SecurityContext\nof the reconnect request matches the SecurityContext associated with\nthe existing open.\nAdd a durable_owner structure to ksmbd_file to store the original opener\u0026apos;s\nUID, GID, and account name. and catpure the owner information when a file\nhandle becomes orphaned. and implementing ksmbd_vfs_compare_durable_owner()\nto validate the identity of the requester during SMB2_CREATE (DHnC).(CVE-2026-31717)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_ecm: Fix net_device lifecycle with device_move\n\nThe net_device is allocated during function instance creation and\nregistered during the bind phase with the gadget device as its sysfs\nparent. When the function unbinds, the parent device is destroyed, but\nthe net_device survives, resulting in dangling sysfs symlinks:\n\n  console:/ # ls -l /sys/class/net/usb0\n  lrwxrwxrwx ... /sys/class/net/usb0 -\u0026gt;\n  /sys/devices/platform/.../gadget.0/net/usb0\n  console:/ # ls -l /sys/devices/platform/.../gadget.0/net/usb0\n  ls: .../gadget.0/net/usb0: No such file or directory\n\nUse device_move() to reparent the net_device between the gadget device\ntree and /sys/devices/virtual across bind and unbind cycles. During the\nfinal unbind, calling device_move(NULL) moves the net_device to the\nvirtual device tree before the gadget device is destroyed. On rebinding,\ndevice_move() reparents the device back under the new gadget, ensuring\nproper sysfs topology and power management ordering.\n\nTo maintain compatibility with legacy composite drivers (e.g., multi.c),\nthe bound flag is used to indicate whether the network device is shared\nand pre-registered during the legacy driver\u0026apos;s bind phase.(CVE-2026-31725)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists\n\nhci_cmd_sync_queue_once() needs to indicate whether a queue item was\nadded, so caller can know if callbacks are called, so it can avoid\nleaking resources.\n\nChange the function to return -EEXIST if queue item already exists.\n\nModify all callsites to handle that.(CVE-2026-43022)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: ignore explicit helper on new expectations\n\nUse the existing master conntrack helper, anything else is not really\nsupported and it just makes validation more complicated, so just ignore\nwhat helper userspace suggests for this expectation.\n\nThis was uncovered when validating CTA_EXPECT_CLASS via different helper\nprovided by userspace than the existing master conntrack helper:\n\n  BUG: KASAN: slab-out-of-bounds in nf_ct_expect_related_report+0x2479/0x27c0\n  Read of size 4 at addr ffff8880043fe408 by task poc/102\n  Call Trace:\n   nf_ct_expect_related_report+0x2479/0x27c0\n   ctnetlink_create_expect+0x22b/0x3b0\n   ctnetlink_new_expect+0x4bd/0x5c0\n   nfnetlink_rcv_msg+0x67a/0x950\n   netlink_rcv_skb+0x120/0x350\n\nAllowing to read kernel memory bytes off the expectation boundary.\n\nCTA_EXPECT_HELP_NAME is still used to offer the helper name to userspace\nvia netlink dump.(CVE-2026-43025)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent\n\nctnetlink_alloc_expect() allocates expectations from a non-zeroing\nslab cache via nf_ct_expect_alloc().  When CTA_EXPECT_NAT is not\npresent in the netlink message, saved_addr and saved_proto are\nnever initialized.  Stale data from a previous slab occupant can\nthen be dumped to userspace by ctnetlink_exp_dump_expect(), which\nchecks these fields to decide whether to emit CTA_EXPECT_NAT.\n\nThe safe sibling nf_ct_expect_init(), used by the packet path,\nexplicitly zeroes these fields.\n\nZero saved_addr, saved_proto and dir in the else branch, guarded\nby IS_ENABLED(CONFIG_NF_NAT) since these fields only exist when\nNAT is enabled.\n\nConfirmed by priming the expect slab with NAT-bearing expectations,\nfreeing them, creating a new expectation without CTA_EXPECT_NAT,\nand observing that the ctnetlink dump emits a spurious\nCTA_EXPECT_NAT containing stale data from the prior allocation.(CVE-2026-43026)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: Wait for RCU readers during policy netns exit\n\nxfrm_policy_fini() frees the policy_bydst hash tables after flushing the\npolicy work items and deleting all policies, but it does not wait for\nconcurrent RCU readers to leave their read-side critical sections first.\n\nThe policy_bydst tables are published via rcu_assign_pointer() and are\nlooked up through rcu_dereference_check(), so netns teardown must also\nwait for an RCU grace period before freeing the table memory.\n\nFix this by adding synchronize_rcu() before freeing the policy hash tables.(CVE-2026-43091)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: ensure safe access to master conntrack\n\nHolding reference on the expectation is not sufficient, the master\nconntrack object can just go away, making exp-\u0026gt;master invalid.\n\nTo access exp-\u0026gt;master safely:\n\n- Grab the nf_conntrack_expect_lock, this gets serialized with\n  clean_from_lists() which also holds this lock when the master\n  conntrack goes away.\n\n- Hold reference on master conntrack via nf_conntrack_find_get().\n  Not so easy since the master tuple to look up for the master conntrack\n  is not available in the existing problematic paths.\n\nThis patch goes for extending the nf_conntrack_expect_lock section\nto address this issue for simplicity, in the cases that are described\nbelow this is just slightly extending the lock section.\n\nThe add expectation command already holds a reference to the master\nconntrack from ctnetlink_create_expect().\n\nHowever, the delete expectation command needs to grab the spinlock\nbefore looking up for the expectation. Expand the existing spinlock\nsection to address this to cover the expectation lookup. Note that,\nthe nf_ct_expect_iterate_net() calls already grabs the spinlock while\niterating over the expectation table, which is correct.\n\nThe get expectation command needs to grab the spinlock to ensure master\nconntrack does not go away. This also expands the existing spinlock\nsection to cover the expectation lookup too. I needed to move the\nnetlink skb allocation out of the spinlock to keep it GFP_KERNEL.\n\nFor the expectation events, the IPEXP_DESTROY event is already delivered\nunder the spinlock, just move the delivery of IPEXP_NEW under the\nspinlock too because the master conntrack event cache is reached through\nexp-\u0026gt;master.\n\nWhile at it, add lockdep notations to help identify what codepaths need\nto grab the spinlock.(CVE-2026-43116)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndlm: validate length in dlm_search_rsb_tree\n\nThe len parameter in dlm_dump_rsb_name() is not validated and comes\nfrom network messages. When it exceeds DLM_RESNAME_MAXLEN, it can\ncause out-of-bounds write in dlm_search_rsb_tree().\n\nAdd length validation to prevent potential buffer overflow.(CVE-2026-43125)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nntfs3: fix circular locking dependency in run_unpack_ex\n\nSyzbot reported a circular locking dependency between wnd-\u0026gt;rw_lock\n(sbi-\u0026gt;used.bitmap) and ni-\u0026gt;file.run_lock.\n\nThe deadlock scenario:\n1. ntfs_extend_mft() takes ni-\u0026gt;file.run_lock then wnd-\u0026gt;rw_lock.\n2. run_unpack_ex() takes wnd-\u0026gt;rw_lock then tries to acquire\n   ni-\u0026gt;file.run_lock inside ntfs_refresh_zone().\n\nThis creates an AB-BA deadlock.\n\nFix this by using down_read_trylock() instead of down_read() when\nacquiring run_lock in run_unpack_ex(). If the lock is contended,\nskip ntfs_refresh_zone() - the MFT zone will be refreshed on the\nnext MFT operation. This breaks the circular dependency since we\nnever block waiting for run_lock while holding wnd-\u0026gt;rw_lock.(CVE-2026-43127)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: serialize sequence allocation under concurrent TLB invalidations\n\nWith concurrent TLB invalidations, completion wait randomly gets timed out\nbecause cmd_sem_val was incremented outside the IOMMU spinlock, allowing\nCMD_COMPL_WAIT commands to be queued out of sequence and breaking the\nordering assumption in wait_on_sem().\nMove the cmd_sem_val increment under iommu-\u0026gt;lock so completion sequence\nallocation is serialized with command queuing.\nAnd remove the unnecessary return.(CVE-2026-43220)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: prevent races in -\u0026gt;query_interfaces()\n\nIt was possible for two query interface works to be concurrently trying\nto update the interfaces.\n\nPrevent this by checking and updating iface_last_update under\niface_lock.(CVE-2026-43239)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmd raid: fix hang when stopping arrays with metadata through dm-raid\n\nWhen using device-mapper\u0026apos;s dm-raid target, stopping a RAID array can cause\nthe system to hang under specific conditions.\n\nThis occurs when:\n\n- A dm-raid managed device tree is suspended from top to bottom\n   (the top-level RAID device is suspended first, followed by its\n    underlying metadata and data devices)\n\n- The top-level RAID device is then removed\n\nRemoving the top-level device triggers a hang in the following sequence:\nthe dm-raid destructor calls md_stop(), which tries to flush the\nwrite-intent bitmap by writing to the metadata sub-devices. However, these\ndevices are already suspended, making them unable to complete the write-intent\noperations and causing an indefinite block.\n\nFix:\n\n- Prevent bitmap flushing when md_stop() is called from dm-raid\ndestructor context\n  and avoid a quiescing/unquescing cycle which could also cause I/O\n\n- Still allow write-intent bitmap flushing when called from dm-raid\nsuspend context\n\nThis ensures that RAID array teardown can complete successfully even when the\nunderlying devices are in a suspended state.\n\nThis second patch uses md_is_rdwr() to distinguish between suspend and\ndestructor paths as elaborated on above.(CVE-2026-43309)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nspi: spidev: fix lock inversion between spi_lock and buf_lock\n\nThe spidev driver previously used two mutexes, spi_lock and buf_lock,\nbut acquired them in different orders depending on the code path:\n\n  write()/read(): buf_lock -\u0026gt; spi_lock\n  ioctl():       spi_lock -\u0026gt; buf_lock\n\nThis AB-BA locking pattern triggers lockdep warnings and can\ncause real deadlocks:\n\n  WARNING: possible circular locking dependency detected\n  spidev_ioctl() -\u0026gt; mutex_lock(\u0026amp;spidev-\u0026gt;buf_lock)\n  spidev_sync_write() -\u0026gt; mutex_lock(\u0026amp;spidev-\u0026gt;spi_lock)\n  *** DEADLOCK ***\n\nThe issue is reproducible with a simple userspace program that\nperforms write() and SPI_IOC_WR_MAX_SPEED_HZ ioctl() calls from\nseparate threads on the same spidev file descriptor.\n\nFix this by simplifying the locking model and removing the lock\ninversion entirely. spidev_sync() no longer performs any locking,\nand all callers serialize access using spi_lock.\n\nbuf_lock is removed since its functionality is fully covered by\nspi_lock, eliminating the possibility of lock ordering issues.\n\nThis removes the lock inversion and prevents deadlocks without\nchanging userspace ABI or behaviour.(CVE-2026-43319)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsched/fair: Fix zero_vruntime tracking fix\n\nJohn reported that stress-ng-yield could make his machine unhappy and\nmanaged to bisect it to commit b3d99f43c72b (\u0026quot;sched/fair: Fix\nzero_vruntime tracking\u0026quot;).\n\nThe combination of yield and that commit was specific enough to\nhypothesize the following scenario:\n\nSuppose we have 2 runnable tasks, both doing yield. Then one will be\neligible and one will not be, because the average position must be in\nbetween these two entities.\n\nTherefore, the runnable task will be eligible, and be promoted a full\nslice (all the tasks do is yield after all). This causes it to jump over\nthe other task and now the other task is eligible and current is no\nlonger. So we schedule.\n\nSince we are runnable, there is no {de,en}queue. All we have is the\n__{en,de}queue_entity() from {put_prev,set_next}_task(). But per the\nfingered commit, those two no longer move zero_vruntime.\n\nAll that moves zero_vruntime are tick and full {de,en}queue.\n\nThis means, that if the two tasks playing leapfrog can reach the\ncritical speed to reach the overflow point inside one tick\u0026apos;s worth of\ntime, we\u0026apos;re up a creek.\n\nAdditionally, when multiple cgroups are involved, there is no guarantee\nthe tick will in fact hit every cgroup in a timely manner. Statistically\nspeaking it will, but that same statistics does not rule out the\npossibility of one cgroup not getting a tick for a significant amount of\ntime -- however unlikely.\n\nTherefore, just like with the yield() case, force an update at the end\nof every slice. This ensures the update is never more than a single\nslice behind and the whole thing is within 2 lag bounds as per the\ncomment on entity_key().(CVE-2026-43323)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: require a full NFS mode SID before reading mode bits\n\nparse_dacl() treats an ACE SID matching sid_unix_NFS_mode as an NFS\nmode SID and reads sid.sub_auth[2] to recover the mode bits.\n\nThat assumes the ACE carries three subauthorities, but compare_sids()\nonly compares min(a, b) subauthorities.  A malicious server can return\nan ACE with num_subauth = 2 and sub_auth[] = {88, 3}, which still\nmatches sid_unix_NFS_mode and then drives the sub_auth[2] read four\nbytes past the end of the ACE.\n\nRequire num_subauth \u0026gt;= 3 before treating the ACE as an NFS mode SID.\nThis keeps the fix local to the special-SID mode path without changing\ncompare_sids() semantics for the rest of cifsacl.(CVE-2026-43350)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ne1000/e1000e: Fix leak in DMA error cleanup\n\nIf an error is encountered while mapping TX buffers, the driver should\nunmap any buffers already mapped for that skb.\n\nBecause count is incremented after a successful mapping, it will always\nmatch the correct number of unmappings needed when dma_error is reached.\nDecrementing count before the while loop in dma_error causes an\noff-by-one error. If any mapping was successful before an unsuccessful\nmapping, exactly one DMA mapping would leak.\n\nIn these commits, a faulty while condition caused an infinite loop in\ndma_error:\nCommit 03b1320dfcee (\u0026quot;e1000e: remove use of skb_dma_map from e1000e\ndriver\u0026quot;)\nCommit 602c0554d7b0 (\u0026quot;e1000: remove use of skb_dma_map from e1000 driver\u0026quot;)\n\nCommit c1fa347f20f1 (\u0026quot;e1000/e1000e/igb/igbvf/ixgb/ixgbe: Fix tests of\nunsigned in *_tx_map()\u0026quot;) fixed the infinite loop, but introduced the\noff-by-one error.\n\nThis issue may still exist in the igbvf driver, but I did not address it\nin this patch.(CVE-2026-43445)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: Fix race bug in nvme_poll_irqdisable()\n\nIn the following scenario, pdev can be disabled between (1) and (3) by\n(2). This sets pdev-\u0026gt;msix_enabled = 0. Then, pci_irq_vector() will\nreturn MSI-X IRQ(\u0026gt;15) for (1) whereas return INTx IRQ(\u0026lt;=15) for (2).\nThis causes IRQ warning because it tries to enable INTx IRQ that has\nnever been disabled before.\n\nTo fix this, save IRQ number into a local variable and ensure\ndisable_irq() and enable_irq() operate on the same IRQ number.  Even if\npci_free_irq_vectors() frees the IRQ concurrently, disable_irq() and\nenable_irq() on a stale IRQ number is still valid and safe, and the\ndepth accounting reamins balanced.\n\ntask 1:\nnvme_poll_irqdisable()\n  disable_irq(pci_irq_vector(pdev, nvmeq-\u0026gt;cq_vector)) ...(1)\n  enable_irq(pci_irq_vector(pdev, nvmeq-\u0026gt;cq_vector))  ...(3)\n\ntask 2:\nnvme_reset_work()\n  nvme_dev_disable()\n    pdev-\u0026gt;msix_enable = 0;  ...(2)\n\ncrash log:\n\n------------[ cut here ]------------\nUnbalanced enable for IRQ 10\nWARNING: kernel/irq/manage.c:753 at __enable_irq+0x102/0x190 kernel/irq/manage.c:753, CPU#1: kworker/1:0H/26\nModules linked in:\nCPU: 1 UID: 0 PID: 26 Comm: kworker/1:0H Not tainted 6.19.0-dirty #9 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: kblockd blk_mq_timeout_work\nRIP: 0010:__enable_irq+0x107/0x190 kernel/irq/manage.c:753\nCode: ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8d 3d 2e 7a 3f 05 41 8b 74 24 2c \u0026lt;67\u0026gt; 48 0f b9 3a e8 ef b9 21 00 5b 41 5c 5d e9 46 54 66 03 e8 e1 b9\nRSP: 0018:ffffc900001bf550 EFLAGS: 00010046\nRAX: 0000000000000007 RBX: 0000000000000000 RCX: ffffffffb20c0e90\nRDX: 0000000000000000 RSI: 000000000000000a RDI: ffffffffb74b88f0\nRBP: ffffc900001bf560 R08: ffff88800197cf00 R09: 0000000000000001\nR10: 0000000000000003 R11: 0000000000000003 R12: ffff8880012a6000\nR13: 1ffff92000037eae R14: 000000000000000a R15: 0000000000000293\nFS:  0000000000000000(0000) GS:ffff8880b49f7000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000555da4a25fa8 CR3: 00000000208e8000 CR4: 00000000000006f0\nCall Trace:\n \u0026lt;TASK\u0026gt;\n enable_irq+0x121/0x1e0 kernel/irq/manage.c:797\n nvme_poll_irqdisable+0x162/0x1c0 drivers/nvme/host/pci.c:1494\n nvme_timeout+0x965/0x14b0 drivers/nvme/host/pci.c:1744\n blk_mq_rq_timed_out block/blk-mq.c:1653 [inline]\n blk_mq_handle_expired+0x227/0x2d0 block/blk-mq.c:1721\n bt_iter+0x2fc/0x3a0 block/blk-mq-tag.c:292\n __sbitmap_for_each_set include/linux/sbitmap.h:269 [inline]\n sbitmap_for_each_set include/linux/sbitmap.h:290 [inline]\n bt_for_each block/blk-mq-tag.c:324 [inline]\n blk_mq_queue_tag_busy_iter+0x969/0x1e80 block/blk-mq-tag.c:536\n blk_mq_timeout_work+0x627/0x870 block/blk-mq.c:1763\n process_one_work+0x956/0x1aa0 kernel/workqueue.c:3257\n process_scheduled_works kernel/workqueue.c:3340 [inline]\n worker_thread+0x65c/0xe60 kernel/workqueue.c:3421\n kthread+0x41a/0x930 kernel/kthread.c:463\n ret_from_fork+0x6f8/0x8c0 arch/x86/kernel/process.c:158\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n \u0026lt;/TASK\u0026gt;\nirq event stamp: 74478\nhardirqs last  enabled at (74477): [\u0026lt;ffffffffb5720a9c\u0026gt;] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:159 [inline]\nhardirqs last  enabled at (74477): [\u0026lt;ffffffffb5720a9c\u0026gt;] _raw_spin_unlock_irq+0x2c/0x60 kernel/locking/spinlock.c:202\nhardirqs last disabled at (74478): [\u0026lt;ffffffffb57207b5\u0026gt;] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]\nhardirqs last disabled at (74478): [\u0026lt;ffffffffb57207b5\u0026gt;] _raw_spin_lock_irqsave+0x85/0xa0 kernel/locking/spinlock.c:162\nsoftirqs last  enabled at (74304): [\u0026lt;ffffffffb1e9466c\u0026gt;] __do_softirq kernel/softirq.c:656 [inline]\nsoftirqs last  enabled at (74304): [\u0026lt;ffffffffb1e9466c\u0026gt;] invoke_softirq kernel/softirq.c:496 [inline]\nsoftirqs last  enabled at (74304): [\u0026lt;ffffffffb1e9466c\u0026gt;] __irq_exit_rcu+0xdc/0x120\n---truncated---(CVE-2026-43448)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation\n\nUlrich reports a regression with nfqueue:\n\nIf an application did not set the \u0026apos;F_GSO\u0026apos; capability flag and a gso\npacket with an unconfirmed nf_conn entry is received all packets are\nnow dropped instead of queued, because the check happens after\nskb_gso_segment().  In that case, we did have exclusive ownership\nof the skb and its associated conntrack entry.  The elevated use\ncount is due to skb_clone happening via skb_gso_segment().\n\nMove the check so that its peformed vs. the aggregated packet.\n\nThen, annotate the individual segments except the first one so we\ncan do a 2nd check at reinject time.\n\nFor the normal case, where userspace does in-order reinjects, this avoids\npacket drops: first reinjected segment continues traversal and confirms\nentry, remaining segments observe the confirmed entry.\n\nWhile at it, simplify nf_ct_drop_unconfirmed(): We only care about\nunconfirmed entries with a refcnt \u0026gt; 1, there is no need to special-case\ndying entries.\n\nThis only happens with UDP.  With TCP, the only unconfirmed packet will\nbe the TCP SYN, those aren\u0026apos;t aggregated by GRO.\n\nNext patch adds a udpgro test case to cover this scenario.(CVE-2026-45859)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Add missing save/restore handling of LBR MSRs\n\nMSR_IA32_DEBUGCTLMSR and LBR MSRs are currently not enumerated by\nKVM_GET_MSR_INDEX_LIST, and LBR MSRs cannot be set with KVM_SET_MSRS. So\nsave/restore is completely broken.\n\nFix it by adding the MSRs to msrs_to_save_base, and allowing writes to\nLBR MSRs from userspace only (as they are read-only MSRs) if LBR\nvirtualization is enabled.  Additionally, to correctly restore L1\u0026apos;s LBRs\nwhile L2 is running, make sure the LBRs are copied from the captured\nVMCB01 save area in svm_copy_vmrun_state().\n\nNote, for VMX, this also fixes a flaw where MSR_IA32_DEBUGCTLMSR isn\u0026apos;t\nreported as an MSR to save/restore.\n\nNote #2, over-reporting MSR_IA32_LASTxxx on Intel is ok, as KVM already\nhandles unsupported reads and writes thanks to commit b5e2fec0ebc3 (\u0026quot;KVM:\nIgnore DEBUGCTL MSRs with no effect\u0026quot;) (kvm_do_msr_access() will morph the\nunsupported userspace write into a nop).\n\n[sean: guard with lbrv checks, massage changelog](CVE-2026-46014)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0026apos;s op cache\n\nMake sure resources are not improperly shared in the op cache and\ncause instruction corruption this way.(CVE-2026-46174)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_inner: Fix IPv6 inner_thoff desync\n\nIn nft_inner_parse_l2l3(), when processing inner IPv6 packets,\nipv6_find_hdr() correctly computes the transport header offset\ntraversing all extension headers, but the result is immediately\noverwritten with nhoff + sizeof(_ip6h) (40 bytes), which only\naccounts for the IPv6 base header. This creates a desync between\ninner_thoff (wrong — points to extension header start) and l4proto\n(correct — e.g., IPPROTO_TCP), enabling transport header forgery\nand potential firewall bypass. This issue affects stable versions\nfrom Linux 6.2.\n\nFor comparison, the normal (non-inner) IPv6 path correctly\npreserves ipv6_find_hdr()\u0026apos;s result. Removing the incorrect overwrite\nensures that ipv6_find_hdr()\u0026apos;s calculated transport header offset is\npreserved, thereby fixing the desynchronization.(CVE-2026-46244)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntap: free page on error paths in tap_get_user_xdp()\n\ntap_get_user_xdp() rejects a frame shorter than ETH_HLEN with -EINVAL,\nand returns -ENOMEM when build_skb() fails. Both paths jump to the err\nlabel without freeing the page that vhost_net_build_xdp() allocated for\nthe frame. tap_sendmsg() discards the per-buffer return value and always\nreturns 0, so vhost_tx_batch() takes the success path and never frees\nthe page; each rejected frame in a batch leaks one page-frag chunk.\n\nFree the page on both error paths, before the skb is built. This is the\ntap counterpart of the same leak in tun_xdp_one().(CVE-2026-46320)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on short-frame rejection in tun_xdp_one()\n\ntun_xdp_one() returns -EINVAL on a frame shorter than ETH_HLEN without\nfreeing the page that vhost_net_build_xdp() allocated for it.\ntun_sendmsg() discards that -EINVAL and still returns total_len, so\nvhost_tx_batch() takes the success path and never frees the page; each\nshort frame in a batch leaks one page-frag chunk.\n\nA local process that can open /dev/net/tun and /dev/vhost-net can hit\nthis path: it attaches a tun/tap device as the vhost-net backend and\nfeeds TX descriptors whose length minus the virtio-net header is below\nETH_HLEN. Each kick leaks the page-frag chunks for that batch, and a\ntight submission loop exhausts host memory and triggers an OOM panic.\nFree the page before returning -EINVAL, matching the XDP-program error\npath in the same function.(CVE-2026-46321)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on build_skb failure in tun_xdp_one()\n\nWhen build_skb() fails in tun_xdp_one(), the function sets ret to\n-ENOMEM and jumps to the out label, which returns without freeing the\npage that vhost_net_build_xdp() allocated for the frame. As with the\nshort-frame rejection path, tun_sendmsg() discards the per-buffer error\nand still returns total_len, so vhost_tx_batch() takes the success path\nand never frees the page. Each build_skb() failure in a batch leaks one\npage-frag chunk.\n\nFree the page before taking the error path, matching the put_page() the\nother error exits of tun_xdp_one() already perform.(CVE-2026-46322)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0026apos;t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0026apos;t hold a reference\non the pages in shinfo-\u0026gt;frags. Appending those frags to another skb\u0026apos;s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0026apos;t merge the skbs.(CVE-2026-46323)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRevert \u0026quot;net/smc: Introduce TCP ULP support\u0026quot;\n\nThis reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40.\n\nAs reported by Al Viro, the TCP ULP support for SMC is fundamentally\nbroken. The implementation attempts to convert an active TCP socket\ninto an SMC socket by modifying the underlying `struct file`, dentry,\nand inode in-place, which violates core VFS invariants that assume\nthese structures are immutable for an open file, creating a risk of\nuse after free errors and general system instability.\n\nGiven the severity of this design flaw and the fact that cleaner\nalternatives (e.g., LD_PRELOAD, BPF) exist for legacy application\ntransparency, the correct course of action is to remove this feature\nentirely.(CVE-2026-46330)","status":"published","published":"2026-07-06T11:11:46Z","modified":"2026-08-18T01:21:14.918073905Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3157","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nArm C1-Ultra, C1-Premium, Neoverse V3 \u0026amp; V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 \u0026amp; X1C, Cortex-A710, Cortex-A78, A78AE \u0026amp; A78C, Cortex-A77, Cortex-A76 \u0026amp; A76A may allow writes to resources owned by a higher exception level.(CVE-2025-10263)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: let smbd_destroy() call disable_work_sync(\u0026amp;info-\u0026gt;post_send_credits_work)\n\nIn smbd_destroy() we may destroy the memory so we better\nwait until post_send_credits_work is no longer pending\nand will never be started again.\n\nI actually just hit the case using rxe:\n\nWARNING: CPU: 0 PID: 138 at drivers/infiniband/sw/rxe/rxe_verbs.c:1032 rxe_post_recv+0x1ee/0x480 [rdma_rxe]\n...\n[ 5305.686979] [    T138]  smbd_post_recv+0x445/0xc10 [cifs]\n[ 5305.687135] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687149] [    T138]  ? __kasan_check_write+0x14/0x30\n[ 5305.687185] [    T138]  ? __pfx_smbd_post_recv+0x10/0x10 [cifs]\n[ 5305.687329] [    T138]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n[ 5305.687356] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687368] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687378] [    T138]  ? _raw_spin_unlock_irqrestore+0x11/0x60\n[ 5305.687389] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687399] [    T138]  ? get_receive_buffer+0x168/0x210 [cifs]\n[ 5305.687555] [    T138]  smbd_post_send_credits+0x382/0x4b0 [cifs]\n[ 5305.687701] [    T138]  ? __pfx_smbd_post_send_credits+0x10/0x10 [cifs]\n[ 5305.687855] [    T138]  ? __pfx___schedule+0x10/0x10\n[ 5305.687865] [    T138]  ? __pfx__raw_spin_lock_irq+0x10/0x10\n[ 5305.687875] [    T138]  ? queue_delayed_work_on+0x8e/0xa0\n[ 5305.687889] [    T138]  process_one_work+0x629/0xf80\n[ 5305.687908] [    T138]  ? srso_alias_return_thunk+0x5/0xfbef5\n[ 5305.687917] [    T138]  ? __kasan_check_write+0x14/0x30\n[ 5305.687933] [    T138]  worker_thread+0x87f/0x1570\n...\n\nIt means rxe_post_recv was called after rdma_destroy_qp().\nThis happened because put_receive_buffer() was triggered\nby ib_drain_qp() and called:\nqueue_work(info-\u0026gt;workqueue, \u0026amp;info-\u0026gt;post_send_credits_work);(CVE-2025-39932)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nMIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits\n\nSince commit e424054000878 (\u0026quot;MIPS: Tracing: Reduce the overhead of\ndynamic Function Tracer\u0026quot;), the macro UASM_i_LA_mostly has been used,\nand this macro can generate more than 2 instructions. At the same\ntime, the code in ftrace assumes that no more than 2 instructions can\nbe generated, which is why it stores them in an int[2] array. However,\nas previously noted, the macro UASM_i_LA_mostly (and now UASM_i_LA)\ncauses a buffer overflow when _mcount is beyond 32 bits. This leads to\ncorruption of the variables located in the __read_mostly section.\n\nThis corruption was observed because the variable\n__cpu_primary_thread_mask was corrupted, causing a hang very early\nduring boot.\n\nThis fix prevents the corruption by avoiding the generation of\ninstructions if they could exceed 2 instructions in\nlength. Fortunately, insn_la_mcount is only used if the instrumented\ncode is located outside the kernel code section, so dynamic ftrace can\nstill be used, albeit in a more limited scope. This is still\npreferable to corrupting memory and/or crashing the kernel.(CVE-2025-71109)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nriscv: Sanitize syscall table indexing under speculation\n\nThe syscall number is a user-controlled value used to index into the\nsyscall table. Use array_index_nospec() to clamp this value after the\nbounds check to prevent speculative out-of-bounds access and subsequent\ndata leakage via cache side channels.(CVE-2025-71203)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm: Disable MMIO access during SMU Mode 1 reset\n\nDuring Mode 1 reset, the ASIC undergoes a reset cycle and becomes\ntemporarily inaccessible via PCIe. Any attempt to access MMIO registers\nduring this window (e.g., from interrupt handlers or other driver threads)\ncan result in uncompleted PCIe transactions, leading to NMI panics or\nsystem hangs.\n\nTo prevent this, set the `no_hw_access` flag to true immediately after\ntriggering the reset. This signals other driver components to skip\nregister accesses while the device is offline.\n\nA memory barrier `smp_mb()` is added to ensure the flag update is\nglobally visible to all cores before the driver enters the sleep/wait\nstate.\n\n(cherry picked from commit 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)(CVE-2026-23213)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: reject new transactions if the fs is fully read-only\n\n[BUG]\nThere is a bug report where a heavily fuzzed fs is mounted with all\nrescue mount options, which leads to the following warnings during\nunmount:\n\n  BTRFS: Transaction aborted (error -22)\n  Modules linked in:\n  CPU: 0 UID: 0 PID: 9758 Comm: repro.out Not tainted\n  6.19.0-rc5-00002-gb71e635feefc #7 PREEMPT(full)\n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n  RIP: 0010:find_free_extent_update_loop fs/btrfs/extent-tree.c:4208 [inline]\n  RIP: 0010:find_free_extent+0x52f0/0x5d20 fs/btrfs/extent-tree.c:4611\n  Call Trace:\n   \u0026lt;TASK\u0026gt;\n   btrfs_reserve_extent+0x2cd/0x790 fs/btrfs/extent-tree.c:4705\n   btrfs_alloc_tree_block+0x1e1/0x10e0 fs/btrfs/extent-tree.c:5157\n   btrfs_force_cow_block+0x578/0x2410 fs/btrfs/ctree.c:517\n   btrfs_cow_block+0x3c4/0xa80 fs/btrfs/ctree.c:708\n   btrfs_search_slot+0xcad/0x2b50 fs/btrfs/ctree.c:2130\n   btrfs_truncate_inode_items+0x45d/0x2350 fs/btrfs/inode-item.c:499\n   btrfs_evict_inode+0x923/0xe70 fs/btrfs/inode.c:5628\n   evict+0x5f4/0xae0 fs/inode.c:837\n   __dentry_kill+0x209/0x660 fs/dcache.c:670\n   finish_dput+0xc9/0x480 fs/dcache.c:879\n   shrink_dcache_for_umount+0xa0/0x170 fs/dcache.c:1661\n   generic_shutdown_super+0x67/0x2c0 fs/super.c:621\n   kill_anon_super+0x3b/0x70 fs/super.c:1289\n   btrfs_kill_super+0x41/0x50 fs/btrfs/super.c:2127\n   deactivate_locked_super+0xbc/0x130 fs/super.c:474\n   cleanup_mnt+0x425/0x4c0 fs/namespace.c:1318\n   task_work_run+0x1d4/0x260 kernel/task_work.c:233\n   exit_task_work include/linux/task_work.h:40 [inline]\n   do_exit+0x694/0x22f0 kernel/exit.c:971\n   do_group_exit+0x21c/0x2d0 kernel/exit.c:1112\n   __do_sys_exit_group kernel/exit.c:1123 [inline]\n   __se_sys_exit_group kernel/exit.c:1121 [inline]\n   __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1121\n   x64_sys_call+0x2210/0x2210 arch/x86/include/generated/asm/syscalls_64.h:232\n   do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n   do_syscall_64+0xe8/0xf80 arch/x86/entry/syscall_64.c:94\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n  RIP: 0033:0x44f639\n  Code: Unable to access opcode bytes at 0x44f60f.\n  RSP: 002b:00007ffc15c4e088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7\n  RAX: ffffffffffffffda RBX: 00000000004c32f0 RCX: 000000000044f639\n  RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001\n  RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004c32f0\n  R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\n   \u0026lt;/TASK\u0026gt;\n\nSince rescue mount options will mark the full fs read-only, there should\nbe no new transaction triggered.\n\nBut during unmount we will evict all inodes, which can trigger a new\ntransaction, and triggers warnings on a heavily corrupted fs.\n\n[CAUSE]\nBtrfs allows new transaction even on a read-only fs, this is to allow\nlog replay happen even on read-only mounts, just like what ext4/xfs do.\n\nHowever with rescue mount options, the fs is fully read-only and cannot\nbe remounted read-write, thus in that case we should also reject any new\ntransactions.\n\n[FIX]\nIf we find the fs has rescue mount options, we should treat the fs as\nerror, so that no new transaction can be started.(CVE-2026-23214)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme-fc: release admin tagset if init fails\n\nnvme_fabrics creates an NVMe/FC controller in following path:\n\n    nvmf_dev_write()\n      -\u0026gt; nvmf_create_ctrl()\n        -\u0026gt; nvme_fc_create_ctrl()\n          -\u0026gt; nvme_fc_init_ctrl()\n\nnvme_fc_init_ctrl() allocates the admin blk-mq resources right after\nnvme_add_ctrl() succeeds.  If any of the subsequent steps fail (changing\nthe controller state, scheduling connect work, etc.), we jump to the\nfail_ctrl path, which tears down the controller references but never\nfrees the admin queue/tag set.  The leaked blk-mq allocations match the\nkmemleak report seen during blktests nvme/fc.\n\nCheck ctrl-\u0026gt;ctrl.admin_tagset in the fail_ctrl path and call\nnvme_remove_admin_tag_set() when it is set so that all admin queue\nallocations are reclaimed whenever controller setup aborts.(CVE-2026-23261)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_expect: use expect-\u0026gt;helper\n\nUse expect-\u0026gt;helper in ctnetlink and /proc to dump the helper name.\nUsing nfct_help() without holding a reference to the master conntrack\nis unsafe.\n\nUse exp-\u0026gt;master-\u0026gt;helper in ctnetlink path if userspace does not provide\nan explicit helper when creating an expectation to retain the existing\nbehaviour. The ctnetlink expectation path holds the reference on the\nmaster conntrack and nf_conntrack_expect lock and the nfnetlink glue\npath refers to the master ct that is attached to the skb.(CVE-2026-31414)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix OOB write in QUERY_INFO for compound requests\n\nWhen a compound request such as READ + QUERY_INFO(Security) is received,\nand the first command (READ) consumes most of the response buffer,\nksmbd could write beyond the allocated buffer while building a security\ndescriptor.\n\nThe root cause was that smb2_get_info_sec() checked buffer space using\nppntsd_size from xattr, while build_sec_desc() often synthesized a\nsignificantly larger descriptor from POSIX ACLs.\n\nThis patch introduces smb_acl_sec_desc_scratch_len() to accurately\ncompute the final descriptor size beforehand, performs proper buffer\nchecking with smb2_calc_max_out_buf_len(), and uses exact-sized\nallocation + iov pinning.(CVE-2026-31432)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix leaking event log memory\n\nDuring the device remove process, the device is reset, causing the\nconfiguration registers to go back to their default state, which is\nzero. As the driver is checking if the event log support was enabled\nbefore deallocating, it will fail if a reset happened before.\n\nDo not check if the support was enabled, the check for \u0026apos;idxd-\u0026gt;evl\u0026apos;\nbeing valid (only allocated if the HW capability is available) is\nenough.(CVE-2026-31440)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix crash when the event log is disabled\n\nIf reporting errors to the event log is not supported by the hardware,\nand an error that causes Function Level Reset (FLR) is received, the\ndriver will try to restore the event log even if it was not allocated.\n\nAlso, only try to free the event log if it was properly allocated.(CVE-2026-31443)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: avoid dereferencing log items after push callbacks\n\nAfter xfsaild_push_item() calls iop_push(), the log item may have been\nfreed if the AIL lock was dropped during the push. Background inode\nreclaim or the dquot shrinker can free the log item while the AIL lock\nis not held, and the tracepoints in the switch statement dereference\nthe log item after iop_push() returns.\n\nFix this by capturing the log item type, flags, and LSN before calling\nxfsaild_push_item(), and introducing a new xfs_ail_push_class trace\nevent class that takes these pre-captured values and the ailp pointer\ninstead of the log item pointer.(CVE-2026-31453)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()\n\nWhen querying a nexthop object via RTM_GETNEXTHOP, the kernel currently\nallocates a fixed-size skb using NLMSG_GOODSIZE. While sufficient for\nsingle nexthops and small Equal-Cost Multi-Path groups, this fixed\nallocation fails for large nexthop groups like 512 nexthops.\n\nThis results in the following warning splat:\n\n WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x176/0x1c0, CPU#20: rep/4608\n [...]\n RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395)\n [...]\n Call Trace:\n  \u0026lt;TASK\u0026gt;\n  rtnetlink_rcv_msg (net/core/rtnetlink.c:6989)\n  netlink_rcv_skb (net/netlink/af_netlink.c:2550)\n  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344)\n  netlink_sendmsg (net/netlink/af_netlink.c:1894)\n  ____sys_sendmsg (net/socket.c:721 net/socket.c:736 net/socket.c:2585)\n  ___sys_sendmsg (net/socket.c:2641)\n  __sys_sendmsg (net/socket.c:2671)\n  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n  \u0026lt;/TASK\u0026gt;\n\nFix this by allocating the size dynamically using nh_nlmsg_size() and\nusing nlmsg_new(), this is consistent with nexthop_notify() behavior. In\naddition, adjust nh_nlmsg_size_grp() so it calculates the size needed\nbased on flags passed. While at it, also add the size of NHA_FDB for\nnexthop group size calculation as it was missing too.\n\nThis cannot be reproduced via iproute2 as the group size is currently\nlimited and the command fails as follows:\n\naddattr_l ERROR: message exceeded bound of 1048(CVE-2026-31531)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Fix static_branch_dec() underflow for aql_disable.\n\nsyzbot reported static_branch_dec() underflow in aql_enable_write(). [0]\n\nThe problem is that aql_enable_write() does not serialise concurrent\nwrite()s to the debugfs.\n\naql_enable_write() checks static_key_false(\u0026amp;aql_disable.key) and\nlater calls static_branch_inc() or static_branch_dec(), but the\nstate may change between the two calls.\n\naql_disable does not need to track inc/dec.\n\nLet\u0026apos;s use static_branch_enable() and static_branch_disable().\n\n[0]:\nval == 0\nWARNING: kernel/jump_label.c:311 at __static_key_slow_dec_cpuslocked.part.0+0x107/0x120 kernel/jump_label.c:311, CPU#0: syz.1.3155/20288\nModules linked in:\nCPU: 0 UID: 0 PID: 20288 Comm: syz.1.3155 Tainted: G     U       L      syzkaller #0 PREEMPT(full)\nTainted: [U]=USER, [L]=SOFTLOCKUP\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026\nRIP: 0010:__static_key_slow_dec_cpuslocked.part.0+0x107/0x120 kernel/jump_label.c:311\nCode: f2 c9 ff 5b 5d c3 cc cc cc cc e8 54 f2 c9 ff 48 89 df e8 ac f9 ff ff eb ad e8 45 f2 c9 ff 90 0f 0b 90 eb a2 e8 3a f2 c9 ff 90 \u0026lt;0f\u0026gt; 0b 90 eb 97 48 89 df e8 5c 4b 33 00 e9 36 ff ff ff 0f 1f 80 00\nRSP: 0018:ffffc9000b9f7c10 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: ffffffff9b3e5d40 RCX: ffffffff823c57b4\nRDX: ffff8880285a0000 RSI: ffffffff823c5846 RDI: ffff8880285a0000\nRBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000a\nR13: 1ffff9200173ef88 R14: 0000000000000001 R15: ffffc9000b9f7e98\nFS:  00007f530dd726c0(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000200000001140 CR3: 000000007cc4a000 CR4: 00000000003526f0\nCall Trace:\n \u0026lt;TASK\u0026gt;\n __static_key_slow_dec_cpuslocked kernel/jump_label.c:297 [inline]\n __static_key_slow_dec kernel/jump_label.c:321 [inline]\n static_key_slow_dec+0x7c/0xc0 kernel/jump_label.c:336\n aql_enable_write+0x2b2/0x310 net/mac80211/debugfs.c:343\n short_proxy_write+0x133/0x1a0 fs/debugfs/file.c:383\n vfs_write+0x2aa/0x1070 fs/read_write.c:684\n ksys_pwrite64 fs/read_write.c:793 [inline]\n __do_sys_pwrite64 fs/read_write.c:801 [inline]\n __se_sys_pwrite64 fs/read_write.c:798 [inline]\n __x64_sys_pwrite64+0x1eb/0x250 fs/read_write.c:798\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f530cf9aeb9\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u0026lt;48\u0026gt; 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f530dd72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012\nRAX: ffffffffffffffda RBX: 00007f530d215fa0 RCX: 00007f530cf9aeb9\nRDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000010\nRBP: 00007f530d008c1f R08: 0000000000000000 R09: 0000000000000000\nR10: 4200000000000005 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f530d216038 R14: 00007f530d215fa0 R15: 00007ffde89fb978\n \u0026lt;/TASK\u0026gt;(CVE-2026-31551)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u0026gt;async_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026amp;ctrl-\u0026gt;async_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026amp;ctrl-\u0026gt;async_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026amp;queue-\u0026gt;release_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u0026lt;--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026amp;ctrl-\u0026gt;async_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u0026lt;--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026amp;queue-\u0026gt;release_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.(CVE-2026-31557)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbcache: fix cached_dev.sb_bio use-after-free and crash\n\nIn our production environment, we have received multiple crash reports\nregarding libceph, which have caught our attention:\n\n```\n[6888366.280350] Call Trace:\n[6888366.280452]  blk_update_request+0x14e/0x370\n[6888366.280561]  blk_mq_end_request+0x1a/0x130\n[6888366.280671]  rbd_img_handle_request+0x1a0/0x1b0 [rbd]\n[6888366.280792]  rbd_obj_handle_request+0x32/0x40 [rbd]\n[6888366.280903]  __complete_request+0x22/0x70 [libceph]\n[6888366.281032]  osd_dispatch+0x15e/0xb40 [libceph]\n[6888366.281164]  ? inet_recvmsg+0x5b/0xd0\n[6888366.281272]  ? ceph_tcp_recvmsg+0x6f/0xa0 [libceph]\n[6888366.281405]  ceph_con_process_message+0x79/0x140 [libceph]\n[6888366.281534]  ceph_con_v1_try_read+0x5d7/0xf30 [libceph]\n[6888366.281661]  ceph_con_workfn+0x329/0x680 [libceph]\n```\n\nAfter analyzing the coredump file, we found that the address of\ndc-\u0026gt;sb_bio has been freed. We know that cached_dev is only freed when it\nis stopped.\n\nSince sb_bio is a part of struct cached_dev, rather than an alloc every\ntime.  If the device is stopped while writing to the superblock, the\nreleased address will be accessed at endio.\n\nThis patch hopes to wait for sb_write to complete in cached_dev_free.\n\nIt should be noted that we analyzed the cause of the problem, then tell\nall details to the QWEN and adopted the modifications it made.(CVE-2026-31580)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Use scratch field in MMIO fragment to hold small write values\n\nWhen exiting to userspace to service an emulated MMIO write, copy the\nto-be-written value to a scratch field in the MMIO fragment if the size\nof the data payload is 8 bytes or less, i.e. can fit in a single chunk,\ninstead of pointing the fragment directly at the source value.\n\nThis fixes a class of use-after-free bugs that occur when the emulator\ninitiates a write using an on-stack, local variable as the source, the\nwrite splits a page boundary, *and* both pages are MMIO pages.  Because\nKVM\u0026apos;s ABI only allows for physically contiguous MMIO requests, accesses\nthat split MMIO pages are separated into two fragments, and are sent to\nuserspace one at a time.  When KVM attempts to complete userspace MMIO in\nresponse to KVM_RUN after the first fragment, KVM will detect the second\nfragment and generate a second userspace exit, and reference the on-stack\nvariable.\n\nThe issue is most visible if the second KVM_RUN is performed by a separate\ntask, in which case the stack of the initiating task can show up as truly\nfreed data.\n\n  ==================================================================\n  BUG: KASAN: use-after-free in complete_emulated_mmio+0x305/0x420\n  Read of size 1 at addr ffff888009c378d1 by task syz-executor417/984\n\n  CPU: 1 PID: 984 Comm: syz-executor417 Not tainted 5.10.0-182.0.0.95.h2627.eulerosv2r13.x86_64 #3\n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014 Call Trace:\n  dump_stack+0xbe/0xfd\n  print_address_description.constprop.0+0x19/0x170\n  __kasan_report.cold+0x6c/0x84\n  kasan_report+0x3a/0x50\n  check_memory_region+0xfd/0x1f0\n  memcpy+0x20/0x60\n  complete_emulated_mmio+0x305/0x420\n  kvm_arch_vcpu_ioctl_run+0x63f/0x6d0\n  kvm_vcpu_ioctl+0x413/0xb20\n  __se_sys_ioctl+0x111/0x160\n  do_syscall_64+0x30/0x40\n  entry_SYSCALL_64_after_hwframe+0x67/0xd1\n  RIP: 0033:0x42477d\n  Code: \u0026lt;48\u0026gt; 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\n  RSP: 002b:00007faa8e6890e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n  RAX: ffffffffffffffda RBX: 00000000004d7338 RCX: 000000000042477d\n  RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005\n  RBP: 00000000004d7330 R08: 00007fff28d546df R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004d733c\n  R13: 0000000000000000 R14: 000000000040a200 R15: 00007fff28d54720\n\n  The buggy address belongs to the page:\n  page:0000000029f6a428 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9c37\n  flags: 0xfffffc0000000(node=0|zone=1|lastcpupid=0x1fffff)\n  raw: 000fffffc0000000 0000000000000000 ffffea0000270dc8 0000000000000000\n  raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected\n\n  Memory state around the buggy address:\n  ffff888009c37780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n  ffff888009c37800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n  \u0026gt;ffff888009c37880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n                                                   ^\n  ffff888009c37900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n  ffff888009c37980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n  ==================================================================\n\nThe bug can also be reproduced with a targeted KVM-Unit-Test by hacking\nKVM to fill a large on-stack variable in complete_emulated_mmio(), i.e. by\noverwrite the data value with garbage.\n\nLimit the use of the scratch fields to 8-byte or smaller accesses, and to\njust writes, as larger accesses and reads are not affected thanks to\nimplementation details in the emulator, but add a sanity check to ensure\nthose details don\u0026apos;t change in the future.  Specifically, KVM never uses\non-stack variables for accesses larger that 8 bytes, e.g. uses an operand\nin the emulator context, and *al\n---truncated---(CVE-2026-31588)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG\n\nThe GRP_ACK_MSG handler in tipc_group_proto_rcv() currently decrements\nbc_ackers on every inbound group ACK, even when the same member has\nalready acknowledged the current broadcast round.\n\nBecause bc_ackers is a u16, a duplicate ACK received after the last\nlegitimate ACK wraps the counter to 65535. Once wrapped,\ntipc_group_bc_cong() keeps reporting congestion and later group\nbroadcasts on the affected socket stay blocked until the group is\nrecreated.\n\nFix this by ignoring duplicate or stale ACKs before touching bc_acked or\nbc_ackers. This makes repeated GRP_ACK_MSG handling idempotent and\nprevents the underflow path.(CVE-2026-31662)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: clear trailing padding in build_polexpire()\n\nbuild_expire() clears the trailing padding bytes of struct\nxfrm_user_expire after setting the hard field via memset_after(),\nbut the analogous function build_polexpire() does not do this for\nstruct xfrm_user_polexpire.\n\nThe padding bytes after the __u8 hard field are left\nuninitialized from the heap allocation, and are then sent to\nuserspace via netlink multicast to XFRMNLGRP_EXPIRE listeners,\nleaking kernel heap memory contents.\n\nAdd the missing memset_after() call, matching build_expire().(CVE-2026-31664)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_multiport: validate range encoding in checkentry\n\nports_match_v1() treats any non-zero pflags entry as the start of a\nport range and unconditionally consumes the next ports[] element as\nthe range end.\n\nThe checkentry path currently validates protocol, flags and count, but\nit does not validate the range encoding itself. As a result, malformed\nrules can mark the last slot as a range start or place two range starts\nback to back, leaving ports_match_v1() to step past the last valid\nports[] element while interpreting the rule.\n\nReject malformed multiport v1 rules in checkentry by validating that\neach range start has a following element and that the following element\nis not itself marked as another range start.(CVE-2026-31681)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate owner of durable handle on reconnect\n\nCurrently, ksmbd does not verify if the user attempting to reconnect\nto a durable handle is the same user who originally opened the file.\nThis allows any authenticated user to hijack an orphaned durable handle\nby predicting or brute-forcing the persistent ID.\n\nAccording to MS-SMB2, the server MUST verify that the SecurityContext\nof the reconnect request matches the SecurityContext associated with\nthe existing open.\nAdd a durable_owner structure to ksmbd_file to store the original opener\u0026apos;s\nUID, GID, and account name. and catpure the owner information when a file\nhandle becomes orphaned. and implementing ksmbd_vfs_compare_durable_owner()\nto validate the identity of the requester during SMB2_CREATE (DHnC).(CVE-2026-31717)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_ecm: Fix net_device lifecycle with device_move\n\nThe net_device is allocated during function instance creation and\nregistered during the bind phase with the gadget device as its sysfs\nparent. When the function unbinds, the parent device is destroyed, but\nthe net_device survives, resulting in dangling sysfs symlinks:\n\n  console:/ # ls -l /sys/class/net/usb0\n  lrwxrwxrwx ... /sys/class/net/usb0 -\u0026gt;\n  /sys/devices/platform/.../gadget.0/net/usb0\n  console:/ # ls -l /sys/devices/platform/.../gadget.0/net/usb0\n  ls: .../gadget.0/net/usb0: No such file or directory\n\nUse device_move() to reparent the net_device between the gadget device\ntree and /sys/devices/virtual across bind and unbind cycles. During the\nfinal unbind, calling device_move(NULL) moves the net_device to the\nvirtual device tree before the gadget device is destroyed. On rebinding,\ndevice_move() reparents the device back under the new gadget, ensuring\nproper sysfs topology and power management ordering.\n\nTo maintain compatibility with legacy composite drivers (e.g., multi.c),\nthe bound flag is used to indicate whether the network device is shared\nand pre-registered during the legacy driver\u0026apos;s bind phase.(CVE-2026-31725)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: ulpi: fix double free in ulpi_register_interface() error path\n\nWhen device_register() fails, ulpi_register() calls put_device() on\nulpi-\u0026gt;dev.\n\nThe device release callback ulpi_dev_release() drops the OF node\nreference and frees ulpi, but the current error path in\nulpi_register_interface() then calls kfree(ulpi) again, causing a\ndouble free.\n\nLet put_device() handle the cleanup through ulpi_dev_release() and\navoid freeing ulpi again in ulpi_register_interface().(CVE-2026-31759)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists\n\nhci_cmd_sync_queue_once() needs to indicate whether a queue item was\nadded, so caller can know if callbacks are called, so it can avoid\nleaking resources.\n\nChange the function to return -EEXIST if queue item already exists.\n\nModify all callsites to handle that.(CVE-2026-43022)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: ignore explicit helper on new expectations\n\nUse the existing master conntrack helper, anything else is not really\nsupported and it just makes validation more complicated, so just ignore\nwhat helper userspace suggests for this expectation.\n\nThis was uncovered when validating CTA_EXPECT_CLASS via different helper\nprovided by userspace than the existing master conntrack helper:\n\n  BUG: KASAN: slab-out-of-bounds in nf_ct_expect_related_report+0x2479/0x27c0\n  Read of size 4 at addr ffff8880043fe408 by task poc/102\n  Call Trace:\n   nf_ct_expect_related_report+0x2479/0x27c0\n   ctnetlink_create_expect+0x22b/0x3b0\n   ctnetlink_new_expect+0x4bd/0x5c0\n   nfnetlink_rcv_msg+0x67a/0x950\n   netlink_rcv_skb+0x120/0x350\n\nAllowing to read kernel memory bytes off the expectation boundary.\n\nCTA_EXPECT_HELP_NAME is still used to offer the helper name to userspace\nvia netlink dump.(CVE-2026-43025)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent\n\nctnetlink_alloc_expect() allocates expectations from a non-zeroing\nslab cache via nf_ct_expect_alloc().  When CTA_EXPECT_NAT is not\npresent in the netlink message, saved_addr and saved_proto are\nnever initialized.  Stale data from a previous slab occupant can\nthen be dumped to userspace by ctnetlink_exp_dump_expect(), which\nchecks these fields to decide whether to emit CTA_EXPECT_NAT.\n\nThe safe sibling nf_ct_expect_init(), used by the packet path,\nexplicitly zeroes these fields.\n\nZero saved_addr, saved_proto and dir in the else branch, guarded\nby IS_ENABLED(CONFIG_NF_NAT) since these fields only exist when\nNAT is enabled.\n\nConfirmed by priming the expect slab with NAT-bearing expectations,\nfreeing them, creating a new expectation without CTA_EXPECT_NAT,\nand observing that the ctnetlink dump emits a spurious\nCTA_EXPECT_NAT containing stale data from the prior allocation.(CVE-2026-43026)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: ensure names are nul-terminated\n\nReject names that lack a \\0 character before feeding them\nto functions that expect c-strings.\n\nFixes tag is the most recent commit that needs this change.(CVE-2026-43028)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ioam6: fix OOB and missing lock\n\nWhen trace-\u0026gt;type.bit6 is set:\n\n    if (trace-\u0026gt;type.bit6) {\n        ...\n        queue = skb_get_tx_queue(dev, skb);\n        qdisc = rcu_dereference(queue-\u0026gt;qdisc);\n\nThis code can lead to an out-of-bounds access of the dev-\u0026gt;_tx[] array\nwhen is_input is true. In such a case, the packet is on the RX path and\nskb-\u0026gt;queue_mapping contains the RX queue index of the ingress device. If\nthe ingress device has more RX queues than the egress device (dev) has\nTX queues, skb_get_queue_mapping(skb) will exceed dev-\u0026gt;num_tx_queues.\nAdd a check to avoid this situation since skb_get_tx_queue() does not\nclamp the index. This issue has also revealed that per queue visibility\ncannot be accurate and will be replaced later as a new feature.\n\nWhile at it, add missing lock around qdisc_qstats_qlen_backlog(). The\nfunction __ioam6_fill_trace_data() is called from both softirq and\nprocess contexts, hence the use of spin_lock_bh() here.(CVE-2026-43083)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: Wait for RCU readers during policy netns exit\n\nxfrm_policy_fini() frees the policy_bydst hash tables after flushing the\npolicy work items and deleting all policies, but it does not wait for\nconcurrent RCU readers to leave their read-side critical sections first.\n\nThe policy_bydst tables are published via rcu_assign_pointer() and are\nlooked up through rcu_dereference_check(), so netns teardown must also\nwait for an RCU grace period before freeing the table memory.\n\nFix this by adding synchronize_rcu() before freeing the policy hash tables.(CVE-2026-43091)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv4: icmp: fix null-ptr-deref in icmp_build_probe()\n\nipv6_stub-\u0026gt;ipv6_dev_find() may return ERR_PTR(-EAFNOSUPPORT) when the\nIPv6 stack is not active (CONFIG_IPV6=m and not loaded), and passing\nthis error pointer to dev_hold() will cause a kernel crash with\nnull-ptr-deref.\n\nInstead, silently discard the request. RFC 8335 does not appear to\ndefine a specific response for the case where an IPv6 interface\nidentifier is syntactically valid but the implementation cannot perform\nthe lookup at runtime, and silently dropping the request may safer than\nmisreporting \u0026quot;No Such Interface\u0026quot;.(CVE-2026-43099)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()\n\nWe need to check __in6_dev_get() for possible NULL value, as\nsuggested by Yiming Qian.\n\nAlso add skb_dst_dev_rcu() instead of skb_dst_dev(),\nand two missing READ_ONCE().\n\nNote that @dev can\u0026apos;t be NULL.(CVE-2026-43101)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: ensure safe access to master conntrack\n\nHolding reference on the expectation is not sufficient, the master\nconntrack object can just go away, making exp-\u0026gt;master invalid.\n\nTo access exp-\u0026gt;master safely:\n\n- Grab the nf_conntrack_expect_lock, this gets serialized with\n  clean_from_lists() which also holds this lock when the master\n  conntrack goes away.\n\n- Hold reference on master conntrack via nf_conntrack_find_get().\n  Not so easy since the master tuple to look up for the master conntrack\n  is not available in the existing problematic paths.\n\nThis patch goes for extending the nf_conntrack_expect_lock section\nto address this issue for simplicity, in the cases that are described\nbelow this is just slightly extending the lock section.\n\nThe add expectation command already holds a reference to the master\nconntrack from ctnetlink_create_expect().\n\nHowever, the delete expectation command needs to grab the spinlock\nbefore looking up for the expectation. Expand the existing spinlock\nsection to address this to cover the expectation lookup. Note that,\nthe nf_ct_expect_iterate_net() calls already grabs the spinlock while\niterating over the expectation table, which is correct.\n\nThe get expectation command needs to grab the spinlock to ensure master\nconntrack does not go away. This also expands the existing spinlock\nsection to cover the expectation lookup too. I needed to move the\nnetlink skb allocation out of the spinlock to keep it GFP_KERNEL.\n\nFor the expectation events, the IPEXP_DESTROY event is already delivered\nunder the spinlock, just move the delivery of IPEXP_NEW under the\nspinlock too because the master conntrack event cache is reached through\nexp-\u0026gt;master.\n\nWhile at it, add lockdep notations to help identify what codepaths need\nto grab the spinlock.(CVE-2026-43116)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndlm: validate length in dlm_search_rsb_tree\n\nThe len parameter in dlm_dump_rsb_name() is not validated and comes\nfrom network messages. When it exceeds DLM_RESNAME_MAXLEN, it can\ncause out-of-bounds write in dlm_search_rsb_tree().\n\nAdd length validation to prevent potential buffer overflow.(CVE-2026-43125)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nntfs3: fix circular locking dependency in run_unpack_ex\n\nSyzbot reported a circular locking dependency between wnd-\u0026gt;rw_lock\n(sbi-\u0026gt;used.bitmap) and ni-\u0026gt;file.run_lock.\n\nThe deadlock scenario:\n1. ntfs_extend_mft() takes ni-\u0026gt;file.run_lock then wnd-\u0026gt;rw_lock.\n2. run_unpack_ex() takes wnd-\u0026gt;rw_lock then tries to acquire\n   ni-\u0026gt;file.run_lock inside ntfs_refresh_zone().\n\nThis creates an AB-BA deadlock.\n\nFix this by using down_read_trylock() instead of down_read() when\nacquiring run_lock in run_unpack_ex(). If the lock is contended,\nskip ntfs_refresh_zone() - the MFT zone will be refreshed on the\nnext MFT operation. This breaks the circular dependency since we\nnever block waiting for run_lock while holding wnd-\u0026gt;rw_lock.(CVE-2026-43127)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: pegasus: enable basic endpoint checking\n\npegasus_probe() fills URBs with hardcoded endpoint pipes without\nverifying the endpoint descriptors:\n\n  - usb_rcvbulkpipe(dev, 1) for RX data\n  - usb_sndbulkpipe(dev, 2) for TX data\n  - usb_rcvintpipe(dev, 3)  for status interrupts\n\nA malformed USB device can present these endpoints with transfer types\nthat differ from what the driver assumes.\n\nAdd a pegasus_usb_ep enum for endpoint numbers, replacing magic\nconstants throughout. Add usb_check_bulk_endpoints() and\nusb_check_int_endpoints() calls before any resource allocation to\nverify endpoint types before use, rejecting devices with mismatched\ndescriptors at probe time, and avoid triggering assertion.\n\nSimilar fix to\n- commit 90b7f2961798 (\u0026quot;net: usb: rtl8150: enable basic endpoint checking\u0026quot;)\n- commit 9e7021d2aeae (\u0026quot;net: usb: catc: enable basic endpoint checking\u0026quot;)(CVE-2026-43156)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmd/bitmap: fix GPF in write_page caused by resize race\n\nA General Protection Fault occurs in write_page() during array resize:\nRIP: 0010:write_page+0x22b/0x3c0 [md_mod]\n\nThis is a use-after-free race between bitmap_daemon_work() and\n__bitmap_resize(). The daemon iterates over `bitmap-\u0026gt;storage.filemap`\nwithout locking, while the resize path frees that storage via\nmd_bitmap_file_unmap(). `quiesce()` does not stop the md thread,\nallowing concurrent access to freed pages.\n\nFix by holding `mddev-\u0026gt;bitmap_info.mutex` during the bitmap update.(CVE-2026-43163)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode\n\nkaweth_set_rx_mode(), the ndo_set_rx_mode callback, calls\nnetif_stop_queue() and netif_wake_queue(). These are TX queue flow\ncontrol functions unrelated to RX multicast configuration.\n\nThe premature netif_wake_queue() can re-enable TX while tx_urb is still\nin-flight, leading to a double usb_submit_urb() on the same URB:\n\nkaweth_start_xmit() {\n    netif_stop_queue();\n    usb_submit_urb(kaweth-\u0026gt;tx_urb);\n}\n\nkaweth_set_rx_mode() {\n    netif_stop_queue();\n    netif_wake_queue();             // wakes TX queue before URB is done\n}\n\nkaweth_start_xmit() {\n    netif_stop_queue();\n    usb_submit_urb(kaweth-\u0026gt;tx_urb); // URB submitted while active\n}\n\nThis triggers the WARN in usb_submit_urb():\n\n  \u0026quot;URB submitted while active\u0026quot;\n\nThis is a similar class of bug fixed in rtl8150 by\n\n- commit 958baf5eaee3 (\u0026quot;net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast\u0026quot;).\n\nAlso kaweth_set_rx_mode() is already functionally broken, the\nreal set_rx_mode action is performed by kaweth_async_set_rx_mode(),\nwhich in turn is not a no-op only at ndo_open() time.(CVE-2026-43180)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()\n\nOn the receive path, __ioam6_fill_trace_data() uses trace-\u0026gt;nodelen\nto decide how much data to write for each node. It trusts this field\nas-is from the incoming packet, with no consistency check against\ntrace-\u0026gt;type (the 24-bit field that tells which data items are\npresent). A crafted packet can set nodelen=0 while setting type bits\n0-21, causing the function to write ~100 bytes past the allocated\nregion (into skb_shared_info), which corrupts adjacent heap memory\nand leads to a kernel panic.\n\nAdd a shared helper ioam6_trace_compute_nodelen() in ioam6.c to\nderive the expected nodelen from the type field, and use it:\n\n  - in ioam6_iptunnel.c (send path, existing validation) to replace\n    the open-coded computation;\n  - in exthdrs.c (receive path, ipv6_hop_ioam) to drop packets whose\n    nodelen is inconsistent with the type field, before any data is\n    written.\n\nPer RFC 9197, bits 12-21 are each short (4-octet) fields, so they\nare included in IOAM6_MASK_SHORT_FIELDS (changed from 0xff100000 to\n0xff1ffc00).(CVE-2026-43186)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: consume xmit errors of GSO frames\n\nudpgro_frglist.sh and udpgro_bench.sh are the flakiest tests\ncurrently in NIPA. They fail in the same exact way, TCP GRO\ntest stalls occasionally and the test gets killed after 10min.\n\nThese tests use veth to simulate GRO. They attach a trivial\n(\u0026quot;return XDP_PASS;\u0026quot;) XDP program to the veth to force TSO off\nand NAPI on.\n\nDigging into the failure mode we can see that the connection\nis completely stuck after a burst of drops. The sender\u0026apos;s snd_nxt\nis at sequence number N [1], but the receiver claims to have\nreceived (rcv_nxt) up to N + 3 * MSS [2]. Last piece of the puzzle\nis that senders rtx queue is not empty (let\u0026apos;s say the block in\nthe rtx queue is at sequence number N - 4 * MSS [3]).\n\nIn this state, sender sends a retransmission from the rtx queue\nwith a single segment, and sequence numbers N-4*MSS:N-3*MSS [3].\nReceiver sees it and responds with an ACK all the way up to\nN + 3 * MSS [2]. But sender will reject this ack as TCP_ACK_UNSENT_DATA\nbecause it has no recollection of ever sending data that far out [1].\nAnd we are stuck.\n\nThe root cause is the mess of the xmit return codes. veth returns\nan error when it can\u0026apos;t xmit a frame. We end up with a loss event\nlike this:\n\n  -------------------------------------------------\n  |   GSO super frame 1   |   GSO super frame 2   |\n  |-----------------------------------------------|\n  | seg | seg | seg | seg | seg | seg | seg | seg |\n  |  1  |  2  |  3  |  4  |  5  |  6  |  7  |  8  |\n  -------------------------------------------------\n     x    ok    ok    \u0026lt;ok\u0026gt;|  ok    ok    ok   \u0026lt;x\u0026gt;\n                          \\\\\n\t\t\t   snd_nxt\n\n\u0026quot;x\u0026quot; means packet lost by veth, and \u0026quot;ok\u0026quot; means it went thru.\nSince veth has TSO disabled in this test it sees individual segments.\nSegment 1 is on the retransmit queue and will be resent.\n\nSo why did the sender not advance snd_nxt even tho it clearly did\nsend up to seg 8? tcp_write_xmit() interprets the return code\nfrom the core to mean that data has not been sent at all. Since\nTCP deals with GSO super frames, not individual segment the crux\nof the problem is that loss of a single segment can be interpreted\nas loss of all. TCP only sees the last return code for the last\nsegment of the GSO frame (in \u0026lt;\u0026gt; brackets in the diagram above).\n\nOf course for the problem to occur we need a setup or a device\nwithout a Qdisc. Otherwise Qdisc layer disconnects the protocol\nlayer from the device errors completely.\n\nWe have multiple ways to fix this.\n\n 1) make veth not return an error when it lost a packet.\n    While this is what I think we did in the past, the issue keeps\n    reappearing and it\u0026apos;s annoying to debug. The game of whack\n    a mole is not great.\n\n 2) fix the damn return codes\n    We only talk about NETDEV_TX_OK and NETDEV_TX_BUSY in the\n    documentation, so maybe we should make the return code from\n    ndo_start_xmit() a boolean. I like that the most, but perhaps\n    some ancient, not-really-networking protocol would suffer.\n\n 3) make TCP ignore the errors\n    It is not entirely clear to me what benefit TCP gets from\n    interpreting the result of ip_queue_xmit()? Specifically once\n    the connection is established and we\u0026apos;re pushing data - packet\n    loss is just packet loss?\n\n 4) this fix\n    Ignore the rc in the Qdisc-less+GSO case, since it\u0026apos;s unreliable.\n    We already always return OK in the TCQ_F_CAN_BYPASS case.\n    In the Qdisc-less case let\u0026apos;s be a bit more conservative and only\n    mask the GSO errors. This path is taken by non-IP-\u0026quot;networks\u0026quot;\n    like CAN, MCTP etc, so we could regress some ancient thing.\n    This is the simplest, but also maybe the hackiest fix?\n\nSimilar fix has been proposed by Eric in the past but never committed\nbecause original reporter was working with an OOT driver and wasn\u0026apos;t\nproviding feedback (see Link).(CVE-2026-43194)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetconsole: avoid OOB reads, msg is not nul-terminated\n\nmsg passed to netconsole from the console subsystem is not guaranteed\nto be nul-terminated. Before recent\ncommit 7eab73b18630 (\u0026quot;netconsole: convert to NBCON console infrastructure\u0026quot;)\nthe message would be placed in printk_shared_pbufs, a static global\nbuffer, so KASAN had harder time catching OOB accesses. Now we see:\n\n    printk: console [netcon_ext0] enabled\n    BUG: KASAN: slab-out-of-bounds in string+0x1f7/0x240\n    Read of size 1 at addr ffff88813b6d4c00 by task pr/netcon_ext0/594\n\n    CPU: 65 UID: 0 PID: 594 Comm: pr/netcon_ext0 Not tainted 6.19.0-11754-g4246fd6547c9\n    Call Trace:\n     kasan_report+0xe4/0x120\n     string+0x1f7/0x240\n     vsnprintf+0x655/0xba0\n     scnprintf+0xba/0x120\n     netconsole_write+0x3fe/0xa10\n     nbcon_emit_next_record+0x46e/0x860\n     nbcon_kthread_func+0x623/0x750\n\n    Allocated by task 1:\n     nbcon_alloc+0x1ea/0x450\n     register_console+0x26b/0xe10\n     init_netconsole+0xbb0/0xda0\n\n    The buggy address belongs to the object at ffff88813b6d4000\n                which belongs to the cache kmalloc-4k of size 4096\n    The buggy address is located 0 bytes to the right of\n                allocated 3072-byte region [ffff88813b6d4000, ffff88813b6d4c00)(CVE-2026-43197)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: serialize sequence allocation under concurrent TLB invalidations\n\nWith concurrent TLB invalidations, completion wait randomly gets timed out\nbecause cmd_sem_val was incremented outside the IOMMU spinlock, allowing\nCMD_COMPL_WAIT commands to be queued out of sequence and breaking the\nordering assumption in wait_on_sem().\nMove the cmd_sem_val increment under iommu-\u0026gt;lock so completion sequence\nallocation is serialized with command queuing.\nAnd remove the unnecessary return.(CVE-2026-43220)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: prevent races in -\u0026gt;query_interfaces()\n\nIt was possible for two query interface works to be concurrently trying\nto update the interfaces.\n\nPrevent this by checking and updating iface_last_update under\niface_lock.(CVE-2026-43239)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nx86/kexec: add a sanity check on previous kernel\u0026apos;s ima kexec buffer\n\nWhen the second-stage kernel is booted via kexec with a limiting command\nline such as \u0026quot;mem=\u0026lt;size\u0026gt;\u0026quot;, the physical range that contains the carried\nover IMA measurement list may fall outside the truncated RAM leading to a\nkernel panic.\n\n    BUG: unable to handle page fault for address: ffff97793ff47000\n    RIP: ima_restore_measurement_list+0xdc/0x45a\n    #PF: error_code(0x0000) – not-present page\n\nOther architectures already validate the range with page_is_ram(), as done\nin commit cbf9c4b9617b (\u0026quot;of: check previous kernel\u0026apos;s ima-kexec-buffer\nagainst memory bounds\u0026quot;) do a similar check on x86.\n\nWithout carrying the measurement list across kexec, the attestation\nwould fail.(CVE-2026-43240)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\next4: move ext4_percpu_param_init() before ext4_mb_init()\n\nWhen running `kvm-xfstests -c ext4/1k -C 1 generic/383` with the\n`DOUBLE_CHECK` macro defined, the following panic is triggered:\n\n==================================================================\nEXT4-fs error (device vdc): ext4_validate_block_bitmap:423:\n                        comm mount: bg 0: bad block bitmap checksum\nBUG: unable to handle page fault for address: ff110000fa2cc000\nPGD 3e01067 P4D 3e02067 PUD 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 0 UID: 0 PID: 2386 Comm: mount Tainted: G W\n                        6.18.0-gba65a4e7120a-dirty #1152 PREEMPT(none)\nRIP: 0010:percpu_counter_add_batch+0x13/0xa0\nCall Trace:\n \u0026lt;TASK\u0026gt;\n ext4_mark_group_bitmap_corrupted+0xcb/0xe0\n ext4_validate_block_bitmap+0x2a1/0x2f0\n ext4_read_block_bitmap+0x33/0x50\n mb_group_bb_bitmap_alloc+0x33/0x80\n ext4_mb_add_groupinfo+0x190/0x250\n ext4_mb_init_backend+0x87/0x290\n ext4_mb_init+0x456/0x640\n __ext4_fill_super+0x1072/0x1680\n ext4_fill_super+0xd3/0x280\n get_tree_bdev_flags+0x132/0x1d0\n vfs_get_tree+0x29/0xd0\n vfs_cmd_create+0x59/0xe0\n __do_sys_fsconfig+0x4f6/0x6b0\n do_syscall_64+0x50/0x1f0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n==================================================================\n\nThis issue can be reproduced using the following commands:\n        mkfs.ext4 -F -q -b 1024 /dev/sda 5G\n        tune2fs -O quota,project /dev/sda\n        mount /dev/sda /tmp/test\n\nWith DOUBLE_CHECK defined, mb_group_bb_bitmap_alloc() reads\nand validates the block bitmap. When the validation fails,\next4_mark_group_bitmap_corrupted() attempts to update\nsbi-\u0026gt;s_freeclusters_counter. However, this percpu_counter has not been\ninitialized yet at this point, which leads to the panic described above.\n\nFix this by moving the execution of ext4_percpu_param_init() to occur\nbefore ext4_mb_init(), ensuring the per-CPU counters are initialized\nbefore they are used.(CVE-2026-43288)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmd raid: fix hang when stopping arrays with metadata through dm-raid\n\nWhen using device-mapper\u0026apos;s dm-raid target, stopping a RAID array can cause\nthe system to hang under specific conditions.\n\nThis occurs when:\n\n- A dm-raid managed device tree is suspended from top to bottom\n   (the top-level RAID device is suspended first, followed by its\n    underlying metadata and data devices)\n\n- The top-level RAID device is then removed\n\nRemoving the top-level device triggers a hang in the following sequence:\nthe dm-raid destructor calls md_stop(), which tries to flush the\nwrite-intent bitmap by writing to the metadata sub-devices. However, these\ndevices are already suspended, making them unable to complete the write-intent\noperations and causing an indefinite block.\n\nFix:\n\n- Prevent bitmap flushing when md_stop() is called from dm-raid\ndestructor context\n  and avoid a quiescing/unquescing cycle which could also cause I/O\n\n- Still allow write-intent bitmap flushing when called from dm-raid\nsuspend context\n\nThis ensures that RAID array teardown can complete successfully even when the\nunderlying devices are in a suspended state.\n\nThis second patch uses md_is_rdwr() to distinguish between suspend and\ndestructor paths as elaborated on above.(CVE-2026-43309)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nspi: spidev: fix lock inversion between spi_lock and buf_lock\n\nThe spidev driver previously used two mutexes, spi_lock and buf_lock,\nbut acquired them in different orders depending on the code path:\n\n  write()/read(): buf_lock -\u0026gt; spi_lock\n  ioctl():       spi_lock -\u0026gt; buf_lock\n\nThis AB-BA locking pattern triggers lockdep warnings and can\ncause real deadlocks:\n\n  WARNING: possible circular locking dependency detected\n  spidev_ioctl() -\u0026gt; mutex_lock(\u0026amp;spidev-\u0026gt;buf_lock)\n  spidev_sync_write() -\u0026gt; mutex_lock(\u0026amp;spidev-\u0026gt;spi_lock)\n  *** DEADLOCK ***\n\nThe issue is reproducible with a simple userspace program that\nperforms write() and SPI_IOC_WR_MAX_SPEED_HZ ioctl() calls from\nseparate threads on the same spidev file descriptor.\n\nFix this by simplifying the locking model and removing the lock\ninversion entirely. spidev_sync() no longer performs any locking,\nand all callers serialize access using spi_lock.\n\nbuf_lock is removed since its functionality is fully covered by\nspi_lock, eliminating the possibility of lock ordering issues.\n\nThis removes the lock inversion and prevents deadlocks without\nchanging userspace ABI or behaviour.(CVE-2026-43319)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SMP: force responder MITM requirements before building the pairing response\n\nsmp_cmd_pairing_req() currently builds the pairing response from the\ninitiator auth_req before enforcing the local BT_SECURITY_HIGH\nrequirement. If the initiator omits SMP_AUTH_MITM, the response can\nalso omit it even though the local side still requires MITM.\n\ntk_request() then sees an auth value without SMP_AUTH_MITM and may\nselect JUST_CFM, making method selection inconsistent with the pairing\npolicy the responder already enforces.\n\nWhen the local side requires HIGH security, first verify that MITM can\nbe achieved from the IO capabilities and then force SMP_AUTH_MITM in the\nresponse in both rsp.auth_req and auth. This keeps the responder auth bits\nand later method selection aligned.(CVE-2026-43334)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: require a full NFS mode SID before reading mode bits\n\nparse_dacl() treats an ACE SID matching sid_unix_NFS_mode as an NFS\nmode SID and reads sid.sub_auth[2] to recover the mode bits.\n\nThat assumes the ACE carries three subauthorities, but compare_sids()\nonly compares min(a, b) subauthorities.  A malicious server can return\nan ACE with num_subauth = 2 and sub_auth[] = {88, 3}, which still\nmatches sid_unix_NFS_mode and then drives the sub_auth[2] read four\nbytes past the end of the ACE.\n\nRequire num_subauth \u0026gt;= 3 before treating the ACE as an NFS mode SID.\nThis keeps the fix local to the special-SID mode path without changing\ncompare_sids() semantics for the rest of cifsacl.(CVE-2026-43350)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/kbuf: check if target buffer list is still legacy on recycle\n\nThere\u0026apos;s a gap between when the buffer was grabbed and when it\npotentially gets recycled, where if the list is empty, someone could\u0026apos;ve\nupgraded it to a ring provided type. This can happen if the request\nis forced via io-wq. The legacy recycling is missing checking if the\nbuffer_list still exists, and if it\u0026apos;s of the correct type. Add those\nchecks.(CVE-2026-43366)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: prevent potential out-of-bounds reads in process_message_header()\n\nIf the message frame is (maliciously) corrupted in a way that the\nlength of the control segment ends up being less than the size of the\nmessage header or a different frame is made to look like a message\nframe, out-of-bounds reads may ensue in process_message_header().\n\nPerform an explicit bounds check before decoding the message header.(CVE-2026-43406)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ne1000/e1000e: Fix leak in DMA error cleanup\n\nIf an error is encountered while mapping TX buffers, the driver should\nunmap any buffers already mapped for that skb.\n\nBecause count is incremented after a successful mapping, it will always\nmatch the correct number of unmappings needed when dma_error is reached.\nDecrementing count before the while loop in dma_error causes an\noff-by-one error. If any mapping was successful before an unsuccessful\nmapping, exactly one DMA mapping would leak.\n\nIn these commits, a faulty while condition caused an infinite loop in\ndma_error:\nCommit 03b1320dfcee (\u0026quot;e1000e: remove use of skb_dma_map from e1000e\ndriver\u0026quot;)\nCommit 602c0554d7b0 (\u0026quot;e1000: remove use of skb_dma_map from e1000 driver\u0026quot;)\n\nCommit c1fa347f20f1 (\u0026quot;e1000/e1000e/igb/igbvf/ixgb/ixgbe: Fix tests of\nunsigned in *_tx_map()\u0026quot;) fixed the infinite loop, but introduced the\noff-by-one error.\n\nThis issue may still exist in the igbvf driver, but I did not address it\nin this patch.(CVE-2026-43445)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery\n\nIn case of a TX error CQE, a recovery flow is triggered,\nmlx5e_reset_txqsq_cc_pc() resets dma_fifo_cc to 0 but not dma_fifo_pc,\ndesyncing the DMA FIFO producer and consumer.\n\nAfter recovery, the producer pushes new DMA entries at the old\ndma_fifo_pc, while the consumer reads from position 0.\nThis causes us to unmap stale DMA addresses from before the recovery.\n\nThe DMA FIFO is a purely software construct with no HW counterpart.\nAt the point of reset, all WQEs have been flushed so dma_fifo_cc is\nalready equal to dma_fifo_pc. There is no need to reset either counter,\nsimilar to how skb_fifo pc/cc are untouched.\n\nRemove the \u0026apos;dma_fifo_cc = 0\u0026apos; reset.\n\nThis fixes the following WARNING:\n    WARNING: CPU: 0 PID: 0 at drivers/iommu/dma-iommu.c:1240 iommu_dma_unmap_page+0x79/0x90\n    Modules linked in: mlx5_vdpa vringh vdpa bonding mlx5_ib mlx5_vfio_pci ipip mlx5_fwctl tunnel4 mlx5_core ib_ipoib geneve ip6_gre ip_gre gre nf_tables ip6_tunnel rdma_ucm ib_uverbs ib_umad vfio_pci vfio_pci_core act_mirred act_skbedit act_vlan vhost_net vhost tap ip6table_mangle ip6table_nat ip6table_filter ip6_tables iptable_mangle cls_matchall nfnetlink_cttimeout act_gact cls_flower sch_ingress vhost_iotlb iptable_raw tunnel6 vfio_iommu_type1 vfio openvswitch nsh rpcsec_gss_krb5 auth_rpcgss oid_registry xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink iptable_nat nf_nat xt_addrtype br_netfilter overlay zram zsmalloc rpcrdma ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_cm ib_core fuse [last unloaded: nf_tables]\n    CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc5_for_upstream_min_debug_2024_12_30_21_33 #1\n    Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n    RIP: 0010:iommu_dma_unmap_page+0x79/0x90\n    Code: 2b 4d 3b 21 72 26 4d 3b 61 08 73 20 49 89 d8 44 89 f9 5b 4c 89 f2 4c 89 e6 48 89 ef 5d 41 5c 41 5d 41 5e 41 5f e9 c7 ae 9e ff \u0026lt;0f\u0026gt; 0b 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00\n    Call Trace:\n     \u0026lt;IRQ\u0026gt;\n     ? __warn+0x7d/0x110\n     ? iommu_dma_unmap_page+0x79/0x90\n     ? report_bug+0x16d/0x180\n     ? handle_bug+0x4f/0x90\n     ? exc_invalid_op+0x14/0x70\n     ? asm_exc_invalid_op+0x16/0x20\n     ? iommu_dma_unmap_page+0x79/0x90\n     ? iommu_dma_unmap_page+0x2e/0x90\n     dma_unmap_page_attrs+0x10d/0x1b0\n     mlx5e_tx_wi_dma_unmap+0xbe/0x120 [mlx5_core]\n     mlx5e_poll_tx_cq+0x16d/0x690 [mlx5_core]\n     mlx5e_napi_poll+0x8b/0xac0 [mlx5_core]\n     __napi_poll+0x24/0x190\n     net_rx_action+0x32a/0x3b0\n     ? mlx5_eq_comp_int+0x7e/0x270 [mlx5_core]\n     ? notifier_call_chain+0x35/0xa0\n     handle_softirqs+0xc9/0x270\n     irq_exit_rcu+0x71/0xd0\n     common_interrupt+0x7f/0xa0\n     \u0026lt;/IRQ\u0026gt;\n     \u0026lt;TASK\u0026gt;\n     asm_common_interrupt+0x22/0x40(CVE-2026-43466)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix deadlock between devlink lock and esw-\u0026gt;wq\n\nesw-\u0026gt;work_queue executes esw_functions_changed_event_handler -\u0026gt;\nesw_vfs_changed_event_handler and acquires the devlink lock.\n\n.eswitch_mode_set (acquires devlink lock in devlink_nl_pre_doit) -\u0026gt;\nmlx5_devlink_eswitch_mode_set -\u0026gt; mlx5_eswitch_disable_locked -\u0026gt;\nmlx5_eswitch_event_handler_unregister -\u0026gt; flush_workqueue deadlocks\nwhen esw_vfs_changed_event_handler executes.\n\nFix that by no longer flushing the work to avoid the deadlock, and using\na generation counter to keep track of work relevance. This avoids an old\nhandler manipulating an esw that has undergone one or more mode changes:\n- the counter is incremented in mlx5_eswitch_event_handler_unregister.\n- the counter is read and passed to the ephemeral mlx5_host_work struct.\n- the work handler takes the devlink lock and bails out if the current\n  generation is different than the one it was scheduled to operate on.\n- mlx5_eswitch_cleanup does the final draining before destroying the wq.\n\nNo longer flushing the workqueue has the side effect of maybe no longer\ncancelling pending vport_change_handler work items, but that\u0026apos;s ok since\nthose are disabled elsewhere:\n- mlx5_eswitch_disable_locked disables the vport eq notifier.\n- mlx5_esw_vport_disable disarms the HW EQ notification and marks\n  vport-\u0026gt;enabled under state_lock to false to prevent pending vport\n  handler from doing anything.\n- mlx5_eswitch_cleanup destroys the workqueue and makes sure all events\n  are disabled/finished.(CVE-2026-43468)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()\n\nAdd the same NULL guard already present in\nl2cap_sock_resume_cb() and l2cap_sock_ready_cb().(CVE-2026-45834)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation\n\nUlrich reports a regression with nfqueue:\n\nIf an application did not set the \u0026apos;F_GSO\u0026apos; capability flag and a gso\npacket with an unconfirmed nf_conn entry is received all packets are\nnow dropped instead of queued, because the check happens after\nskb_gso_segment().  In that case, we did have exclusive ownership\nof the skb and its associated conntrack entry.  The elevated use\ncount is due to skb_clone happening via skb_gso_segment().\n\nMove the check so that its peformed vs. the aggregated packet.\n\nThen, annotate the individual segments except the first one so we\ncan do a 2nd check at reinject time.\n\nFor the normal case, where userspace does in-order reinjects, this avoids\npacket drops: first reinjected segment continues traversal and confirms\nentry, remaining segments observe the confirmed entry.\n\nWhile at it, simplify nf_ct_drop_unconfirmed(): We only care about\nunconfirmed entries with a refcnt \u0026gt; 1, there is no need to special-case\ndying entries.\n\nThis only happens with UDP.  With TCP, the only unconfirmed packet will\nbe the TCP SYN, those aren\u0026apos;t aggregated by GRO.\n\nNext patch adds a udpgro test case to cover this scenario.(CVE-2026-45859)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix slab-use-after-free in qd_put\n\nCommit a475c5dd16e5 (\u0026quot;gfs2: Free quota data objects synchronously\u0026quot;)\nstarted freeing quota data objects during filesystem shutdown instead of\nputting them back onto the LRU list, but it failed to remove these\nobjects from the LRU list, causing LRU list corruption.  This caused\nuse-after-free when the shrinker (gfs2_qd_shrink_scan) tried to access\nalready-freed objects on the LRU list.\n\nFix this by removing qd objects from the LRU list before freeing them in\nqd_put().\n\nInitial fix from Deepanshu Kartikey \u0026lt;(CVE-2026-45861)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix bpf_xdp_store_bytes proto for read-only arg\n\nWhile making some maps in Cilium read-only from the BPF side, we noticed\nthat the bpf_xdp_store_bytes proto is incorrect. In particular, the\nverifier was throwing the following error:\n\n  ; ret = ctx_store_bytes(ctx, l3_off + offsetof(struct iphdr, saddr),\n                          \u0026amp;nat-\u0026gt;address, 4, 0);\n  635: (79) r1 = *(u64 *)(r10 -144)     ; R1=ctx() R10=fp0 fp-144=ctx()\n  636: (b4) w2 = 26                     ; R2=26\n  637: (b4) w4 = 4                      ; R4=4\n  638: (b4) w5 = 0                      ; R5=0\n  639: (85) call bpf_xdp_store_bytes#190\n  write into map forbidden, value_size=6 off=0 size=4\n\nnat comes from a BPF_F_RDONLY_PROG map, so R3 is a PTR_TO_MAP_VALUE.\nThe verifier checks the helper\u0026apos;s memory access to R3 in\ncheck_mem_size_reg, as it reaches ARG_CONST_SIZE argument. The third\nargument has expected type ARG_PTR_TO_UNINIT_MEM, which includes the\nMEM_WRITE flag. The verifier thus checks for a BPF_WRITE access on R3.\nGiven R3 points to a read-only map, the check fails.\n\nConversely, ARG_PTR_TO_UNINIT_MEM can also lead to the helper reading\nfrom uninitialized memory.\n\nThis patch simply fixes the expected argument type to match that of\nbpf_skb_store_bytes.(CVE-2026-45886)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdns3: fix role switching during resume\n\nIf the role change while we are suspended, the cdns3 driver switches to the\nnew mode during resume. However, switching to host mode in this context\ncauses a NULL pointer dereference.\n\nThe host role\u0026apos;s start() operation registers a xhci-hcd device, but its\nprobe is deferred while we are in the resume path. The host role\u0026apos;s resume()\noperation assumes the xhci-hcd device is already probed, which is not the\ncase, leading to the dereference. Since the start() operation of the new\nrole is already called, the resume operation can be skipped.\n\nSo skip the resume operation for the new role if a role switch occurs\nduring resume. Once the resume sequence is complete, the xhci-hcd device\ncan be probed in case of host mode.\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000208\nMem abort info:\n...\nData abort info:\n...\n[0000000000000208] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 0000000096000004 [#1]  SMP\nModules linked in:\nCPU: 0 UID: 0 PID: 146 Comm: sh Not tainted\n6.19.0-rc7-00013-g6e64f4aabfae-dirty #135 PREEMPT\nHardware name: Texas Instruments J7200 EVM (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : usb_hcd_is_primary_hcd+0x0/0x1c\nlr : cdns_host_resume+0x24/0x5c\n...\nCall trace:\n usb_hcd_is_primary_hcd+0x0/0x1c (P)\n cdns_resume+0x6c/0xbc\n cdns3_controller_resume.isra.0+0xe8/0x17c\n cdns3_plat_resume+0x18/0x24\n platform_pm_resume+0x2c/0x68\n dpm_run_callback+0x90/0x248\n device_resume+0x100/0x24c\n dpm_resume+0x190/0x2ec\n dpm_resume_end+0x18/0x34\n suspend_devices_and_enter+0x2b0/0xa44\n pm_suspend+0x16c/0x5fc\n state_store+0x80/0xec\n kobj_attr_store+0x18/0x2c\n sysfs_kf_write+0x7c/0x94\n kernfs_fop_write_iter+0x130/0x1dc\n vfs_write+0x240/0x370\n ksys_write+0x70/0x108\n __arm64_sys_write+0x1c/0x28\n invoke_syscall+0x48/0x10c\n el0_svc_common.constprop.0+0x40/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0x108\n el0t_64_sync_handler+0xa0/0xe4\n el0t_64_sync+0x198/0x19c\nCode: 52800003 f9407ca5 d63f00a0 17ffffe4 (f9410401)\n---[ end trace 0000000000000000 ]---(CVE-2026-45911)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: fix memory leaks in gfs2_fill_super error path\n\nFix two memory leaks in the gfs2_fill_super() error handling path when\ntransitioning a filesystem to read-write mode fails.\n\nFirst leak: kthread objects (thread_struct, task_struct, etc.)\nWhen gfs2_freeze_lock_shared() fails after init_threads() succeeds, the\ncreated kernel threads (logd and quotad) are never destroyed. This\noccurs because the fail_per_node label doesn\u0026apos;t call\ngfs2_destroy_threads().\n\nSecond leak: quota bitmap buffer (8192 bytes)\nWhen gfs2_make_fs_rw() fails after gfs2_quota_init() succeeds but\nbefore other operations complete, the allocated quota bitmap is never\nfreed.\n\nThe fix moves thread cleanup to the fail_per_node label to handle all\nerror paths uniformly. gfs2_destroy_threads() is safe to call\nunconditionally as it checks for NULL pointers. Quota cleanup is added\nin gfs2_make_fs_rw() to properly handle the withdrawal case where\nquota initialization succeeds but the filesystem is then withdrawn.\n\nThread leak backtrace (gfs2_freeze_lock_shared failure):\n  unreferenced object 0xffff88801d7bca80 (size 4480):\n    copy_process+0x3a1/0x4670 kernel/fork.c:2422\n    kernel_clone+0xf3/0x6e0 kernel/fork.c:2779\n    kthread_create_on_node+0x100/0x150 kernel/kthread.c:478\n    init_threads+0xab/0x350 fs/gfs2/ops_fstype.c:611\n    gfs2_fill_super+0xe5c/0x1240 fs/gfs2/ops_fstype.c:1265\n\nQuota leak backtrace (gfs2_make_fs_rw failure):\n  unreferenced object 0xffff88812de7c000 (size 8192):\n    gfs2_quota_init+0xe5/0x820 fs/gfs2/quota.c:1409\n    gfs2_make_fs_rw+0x7a/0xe0 fs/gfs2/super.c:149\n    gfs2_fill_super+0xfbb/0x1240 fs/gfs2/ops_fstype.c:1275(CVE-2026-45961)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()\n\nCover a missed execution path with a new check.(CVE-2026-45982)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix use-after-free in iomap inline data write path\n\nThe inline data buffer head (dibh) is being released prematurely in\ngfs2_iomap_begin() via release_metapath() while iomap-\u0026gt;inline_data\nstill points to dibh-\u0026gt;b_data. This causes a use-after-free when\niomap_write_end_inline() later attempts to write to the inline data\narea.\n\nThe bug sequence:\n1. gfs2_iomap_begin() calls gfs2_meta_inode_buffer() to read inode\n   metadata into dibh\n2. Sets iomap-\u0026gt;inline_data = dibh-\u0026gt;b_data + sizeof(struct gfs2_dinode)\n3. Calls release_metapath() which calls brelse(dibh), dropping refcount\n   to 0\n4. kswapd reclaims the page (~39ms later in the syzbot report)\n5. iomap_write_end_inline() tries to memcpy() to iomap-\u0026gt;inline_data\n6. KASAN detects use-after-free write to freed memory\n\nFix by storing dibh in iomap-\u0026gt;private and incrementing its refcount\nwith get_bh() in gfs2_iomap_begin(). The buffer is then properly\nreleased in gfs2_iomap_end() after the inline write completes,\nensuring the page stays alive for the entire iomap operation.\n\nNote: A C reproducer is not available for this issue. The fix is based\non analysis of the KASAN report and code review showing the buffer head\nis freed before use.\n\n[agruenba: Take buffer head reference in gfs2_iomap_begin() to avoid\nleaks in gfs2_iomap_get() and gfs2_iomap_alloc().](CVE-2026-45984)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()\n\nSome crafted images can have illegal (!partial_decoding \u0026amp;\u0026amp;\nm_llen \u0026lt; m_plen) extents, and the LZ4 inplace decompression path\ncan be wrongly hit, but it cannot handle (outpages \u0026lt; inpages)\nproperly: \u0026quot;outpages - inpages\u0026quot; wraps to a large value and\nthe subsequent rq-\u0026gt;out[] access reads past the decompressed_pages\narray.\n\nHowever, such crafted cases can correctly result in a corruption\nreport in the normal LZ4 non-inplace path.\n\nLet\u0026apos;s add an additional check to fix this for backporting.\n\nReproducible image (base64-encoded gzipped blob):\n\nH4sIAJGR12kCA+3SPUoDQRgG4MkmkkZk8QRbRFIIi9hbpEjrHQI5ghfwCN5BLCzTGtLbBI+g\ndilSJo1CnIm7GEXFxhT6PDDwfrs73/ywIQD/1ePD4r7Ou6ETsrq4mu7XcWfj++Pb58nJU/9i\nPNtbjhan04/9GtX4qVYc814WDqt6FaX5s+ZwXXeq52lndT6IuVvlblytLMvh4Gzwaf90nsvz\n2DF/21+20T/ldgp5s1jXRaN4t/8izsy/OUB6e/Qa79r+JwAAAAAAAL52vQVuGQAAAP6+my1w\nywAAAAAAAADwu14ATsEYtgBQAAA=\n\n$ mount -t erofs -o cache_strategy=disabled foo.erofs /mnt\n$ dd if=/mnt/data of=/dev/null bs=4096 count=1(CVE-2026-45999)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: fix u32 overflow in pushbuf reloc bounds check\n\nnouveau_gem_pushbuf_reloc_apply() validates each relocation with\n\n    if (r-\u0026gt;reloc_bo_offset + 4 \u0026gt; nvbo-\u0026gt;bo.base.size)\n\nbut reloc_bo_offset is __u32 (uapi/drm/nouveau_drm.h) and the integer\nliteral 4 promotes to unsigned int, so the addition is performed in 32\nbits and wraps before the comparison against the size_t bo size.\n\nCast to u64 so the addition happens in 64-bit arithmetic.\n\n[ Add Fixes: tag. - Danilo ](CVE-2026-46006)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Add missing save/restore handling of LBR MSRs\n\nMSR_IA32_DEBUGCTLMSR and LBR MSRs are currently not enumerated by\nKVM_GET_MSR_INDEX_LIST, and LBR MSRs cannot be set with KVM_SET_MSRS. So\nsave/restore is completely broken.\n\nFix it by adding the MSRs to msrs_to_save_base, and allowing writes to\nLBR MSRs from userspace only (as they are read-only MSRs) if LBR\nvirtualization is enabled.  Additionally, to correctly restore L1\u0026apos;s LBRs\nwhile L2 is running, make sure the LBRs are copied from the captured\nVMCB01 save area in svm_copy_vmrun_state().\n\nNote, for VMX, this also fixes a flaw where MSR_IA32_DEBUGCTLMSR isn\u0026apos;t\nreported as an MSR to save/restore.\n\nNote #2, over-reporting MSR_IA32_LASTxxx on Intel is ok, as KVM already\nhandles unsupported reads and writes thanks to commit b5e2fec0ebc3 (\u0026quot;KVM:\nIgnore DEBUGCTL MSRs with no effect\u0026quot;) (kvm_do_msr_access() will morph the\nunsupported userspace write into a nop).\n\n[sean: guard with lbrv checks, massage changelog](CVE-2026-46014)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipmi:ssif: Clean up kthread on errors\n\nIf an error occurs after the ssif kthread is created, but before the\nmain IPMI code starts the ssif interface, the ssif kthread will not\nbe stopped.\n\nSo make sure the kthread is stopped on an error condition if it is\nrunning.(CVE-2026-46044)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: fix soft lockup in retry_aligned_read()\n\nWhen retry_aligned_read() encounters an overlapped stripe, it releases\nthe stripe via raid5_release_stripe() which puts it on the lockless\nreleased_stripes llist. In the next raid5d loop iteration,\nrelease_stripe_list() drains the stripe onto handle_list (since\nSTRIPE_HANDLE is set by the original IO), but retry_aligned_read()\nruns before handle_active_stripes() and removes the stripe from\nhandle_list via find_get_stripe() -\u0026gt; list_del_init(). This prevents\nhandle_stripe() from ever processing the stripe to resolve the\noverlap, causing an infinite loop and soft lockup.\n\nFix this by using __release_stripe() with temp_inactive_list instead\nof raid5_release_stripe() in the failure path, so the stripe does not\ngo through the released_stripes llist. This allows raid5d to break out\nof its loop, and the overlap will be resolved when the stripe is\neventually processed by handle_stripe().(CVE-2026-46051)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nceph: only d_add() negative dentries when they are unhashed\n\nCeph can call d_add(dentry, NULL) on a negative dentry that is already\npresent in the primary dcache hash.\n\nIn the current VFS that is not safe.  d_add() goes through __d_add()\nto __d_rehash(), which unconditionally reinserts dentry-\u0026gt;d_hash into\nthe hlist_bl bucket.  If the dentry is already hashed, reinserting the\nsame node can corrupt the bucket, including creating a self-loop.\nOnce that happens, __d_lookup() can spin forever in the hlist_bl walk,\ntypically looping only on the d_name.hash mismatch check and\neventually triggering RCU stall reports like this one:\n\n rcu: INFO: rcu_sched self-detected stall on CPU\n rcu:         87-....: (2100 ticks this GP) idle=3a4c/1/0x4000000000000000 softirq=25003319/25003319 fqs=829\n rcu:         (t=2101 jiffies g=79058445 q=698988 ncpus=192)\n CPU: 87 UID: 2952868916 PID: 3933303 Comm: php-cgi8.3 Not tainted 6.18.17-i1-amd #950 NONE\n Hardware name: Dell Inc. PowerEdge R7615/0G9DHV, BIOS 1.6.6 09/22/2023\n RIP: 0010:__d_lookup+0x46/0xb0\n Code: c1 e8 07 48 8d 04 c2 48 8b 00 49 89 fc 49 89 f5 48 89 c3 48 83 e3 fe 48 83 f8 01 77 0f eb 2d 0f 1f 44 00 00 48 8b 1b 48 85 db \u0026lt;74\u0026gt; 20 39 6b 18 75 f3 48 8d 7b 78 e8 ba 85 d0 00 4c 39 63 10 74 1f\n RSP: 0018:ff745a70c8253898 EFLAGS: 00000282\n RAX: ff26e470054cb208 RBX: ff26e470054cb208 RCX: 000000006e958966\n RDX: ff26e48267340000 RSI: ff745a70c82539b0 RDI: ff26e458f74655c0\n RBP: 000000006e958966 R08: 0000000000000180 R09: 9cd08d909b919a89\n R10: ff26e458f74655c0 R11: 0000000000000000 R12: ff26e458f74655c0\n R13: ff745a70c82539b0 R14: d0d0d0d0d0d0d0d0 R15: 2f2f2f2f2f2f2f2f\n FS:  00007f5770896980(0000) GS:ff26e482c5d88000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f5764de50c0 CR3: 000000a72abb5001 CR4: 0000000000771ef0\n PKRU: 55555554\n Call Trace:\n  \u0026lt;TASK\u0026gt;\n  lookup_fast+0x9f/0x100\n  walk_component+0x1f/0x150\n  link_path_walk+0x20e/0x3d0\n  path_lookupat+0x68/0x180\n  filename_lookup+0xdc/0x1e0\n  vfs_statx+0x6c/0x140\n  vfs_fstatat+0x67/0xa0\n  __do_sys_newfstatat+0x24/0x60\n  do_syscall_64+0x6a/0x230\n  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThis is reachable with reused cached negative dentries.  A Ceph lookup\nor atomic_open can be handed a negative dentry that is already hashed,\nand fs/ceph/dir.c then hits one of two paths that incorrectly assume\n\u0026quot;negative\u0026quot; also means \u0026quot;unhashed\u0026quot;:\n\n  - ceph_finish_lookup():\n      MDS reply is -ENOENT with no trace\n      -\u0026gt; d_add(dentry, NULL)\n\n  - ceph_lookup():\n      local ENOENT fast path for a complete directory with shared caps\n      -\u0026gt; d_add(dentry, NULL)\n\nBoth paths can therefore re-add an already-hashed negative dentry.\n\nCeph already uses the correct pattern elsewhere: ceph_fill_trace() only\ncalls d_add(dn, NULL) for a negative null-dentry reply when d_unhashed(dn)\nis true.\n\nFix both fs/ceph/dir.c sites the same way: only call d_add() for a\nnegative dentry when it is actually unhashed.  If the negative dentry\nis already hashed, leave it in place and reuse it as-is.\n\nThis preserves the existing behavior for unhashed dentries while\navoiding d_hash list corruption for reused hashed negatives.(CVE-2026-46052)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0026apos;t intercepted by L1\n\nExplicitly synthesize a #UD for VMMCALL if L2 is active, L1 does NOT want\nto intercept VMMCALL, nested_svm_l2_tlb_flush_enabled() is true, and the\nhypercall is something other than one of the supported Hyper-V hypercalls.\nWhen all of the above conditions are met, KVM will intercept VMMCALL but\nnever forward it to L1, i.e. will let L2 make hypercalls as if it were L1.\n\nThe TLFS says a whole lot of nothing about this scenario, so go with the\narchitectural behavior, which says that VMMCALL #UDs if it\u0026apos;s not\nintercepted.\n\nOpportunistically do a 2-for-1 stub trade by stub-ifying the new API\ninstead of the helpers it uses.  The last remaining \u0026quot;single\u0026quot; stub will\nsoon be dropped as well.\n\n[sean: rewrite changelog and comment, tag for stable, remove defunct stubs](CVE-2026-46076)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix the out-of-bounds nameoff handling for trailing dirents\n\nCurrently we already have boundary-checks for nameoffs, but the trailing\ndirents are special since the namelens are calculated with strnlen()\nwith unchecked nameoffs.\n\nIf a crafted EROFS has a trailing dirent with nameoff \u0026gt;= maxsize,\nmaxsize - nameoff can underflow, causing strnlen() to read past the\ndirectory block.\n\nnameoff0 should also be verified to be a multiple of\n`sizeof(struct erofs_dirent)` as well [1].\n\n[1] https://sashiko.dev/#/patchset/20260416063511.3173774-1-hsiangkao%40linux.alibaba.com(CVE-2026-46078)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0\n\nINVLPGA should cause a #UD when EFER.SVME is not set. Add a check to\nproperly inject #UD when EFER.SVME=0.\n\n[sean: tag for stable@](CVE-2026-46082)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmalloc: take vmap_purge_lock in shrinker\n\ndecay_va_pool_node() can be invoked concurrently from two paths:\n__purge_vmap_area_lazy() when pools are being purged, and the shrinker via\nvmap_node_shrink_scan().\n\nHowever, decay_va_pool_node() is not safe to run concurrently, and the\nshrinker path currently lacks serialization, leading to races and possible\nleaks.\n\nProtect decay_va_pool_node() by taking vmap_purge_lock in the shrinker\npath to ensure serialization with purge users.(CVE-2026-46093)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt\n\nhci_le_create_big_complete_evt() iterates over BT_BOUND connections for\na BIG handle using a while loop, accessing ev-\u0026gt;bis_handle[i++] on each\niteration.  However, there is no check that i stays within ev-\u0026gt;num_bis\nbefore the array access.\n\nWhen a controller sends a LE_Create_BIG_Complete event with fewer\nbis_handle entries than there are BT_BOUND connections for that BIG,\nor with num_bis=0, the loop reads beyond the valid bis_handle[] flex\narray into adjacent heap memory.  Since the out-of-bounds values\ntypically exceed HCI_CONN_HANDLE_MAX (0x0EFF), hci_conn_set_handle()\nrejects them and the connection remains in BT_BOUND state.  The same\nconnection is then found again by hci_conn_hash_lookup_big_state(),\ncreating an infinite loop with hci_dev_lock held.\n\nFix this by terminating the BIG if in case not all BIS could be setup\nproperly.(CVE-2026-46138)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: vport: fix self-deadlock on release of tunnel ports\n\nvports are used concurrently and protected by RCU, so netdev_put()\nmust happen after the RCU grace period.  So, either in an RCU call or\nafter the synchronize_net().  The rtnl_delete_link() must happen under\nRTNL and so can\u0026apos;t be executed in RCU context.  Calling synchronize_net()\nwhile holding RTNL is not a good idea for performance and system\nstability under load in general, so calling netdev_put() in RCU call\nis the right solution here.\n\nHowever,\nwhen the device is deleted, rtnl_unlock() will call netdev_run_todo()\nand block until all the references are gone.  In the current code this\nmeans that we never reach the call_rcu() and the vport is never freed\nand the reference is never released, causing a self-deadlock on device\nremoval.\n\nFix that by moving the rcu_call() before the rtnl_unlock(), so the\nscheduled RCU callback will be executed when synchronize_net() is\ncalled from the rtnl_unlock()-\u0026gt;netdev_run_todo() while the RTNL itself\nis already released.(CVE-2026-46165)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nriscv: kvm: fix vector context allocation leak\n\nWhen the second kzalloc (host_context.vector.datap) fails in\nkvm_riscv_vcpu_alloc_vector_context, the first allocation\n(guest_context.vector.datap) is leaked. Free it before returning.(CVE-2026-46171)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0026apos;s op cache\n\nMake sure resources are not improperly shared in the op cache and\ncause instruction corruption this way.(CVE-2026-46174)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()\n\nSashiko points out that mlx4_srq_alloc() was not undone during error\nunwind, add the missing call to mlx4_srq_free().(CVE-2026-46178)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()\n\nSashiko noticed an out-of-bounds read [1].\n\nIn spi_nor_params_show(), the snor_f_names array is passed to\nspi_nor_print_flags() using sizeof(snor_f_names).\n\nSince snor_f_names is an array of pointers, sizeof() returns the total\nnumber of bytes occupied by the pointers\n\t(element_count * sizeof(void *))\nrather than the element count itself. On 64-bit systems, this makes the\npassed length 8x larger than intended.\n\nInside spi_nor_print_flags(), the \u0026apos;names_len\u0026apos; argument is used to\nbounds-check the \u0026apos;names\u0026apos; array access. An out-of-bounds read occurs\nif a flag bit is set that exceeds the array\u0026apos;s actual element count\nbut is within the inflated byte-size count.\n\nCorrect this by using ARRAY_SIZE() to pass the actual number of\nstring pointers in the array.(CVE-2026-46190)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_inner: Fix IPv6 inner_thoff desync\n\nIn nft_inner_parse_l2l3(), when processing inner IPv6 packets,\nipv6_find_hdr() correctly computes the transport header offset\ntraversing all extension headers, but the result is immediately\noverwritten with nhoff + sizeof(_ip6h) (40 bytes), which only\naccounts for the IPv6 base header. This creates a desync between\ninner_thoff (wrong — points to extension header start) and l4proto\n(correct — e.g., IPPROTO_TCP), enabling transport header forgery\nand potential firewall bypass. This issue affects stable versions\nfrom Linux 6.2.\n\nFor comparison, the normal (non-inner) IPv6 path correctly\npreserves ipv6_find_hdr()\u0026apos;s result. Removing the incorrect overwrite\nensures that ipv6_find_hdr()\u0026apos;s calculated transport header offset is\npreserved, thereby fixing the desynchronization.(CVE-2026-46244)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntap: free page on error paths in tap_get_user_xdp()\n\ntap_get_user_xdp() rejects a frame shorter than ETH_HLEN with -EINVAL,\nand returns -ENOMEM when build_skb() fails. Both paths jump to the err\nlabel without freeing the page that vhost_net_build_xdp() allocated for\nthe frame. tap_sendmsg() discards the per-buffer return value and always\nreturns 0, so vhost_tx_batch() takes the success path and never frees\nthe page; each rejected frame in a batch leaks one page-frag chunk.\n\nFree the page on both error paths, before the skb is built. This is the\ntap counterpart of the same leak in tun_xdp_one().(CVE-2026-46320)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on short-frame rejection in tun_xdp_one()\n\ntun_xdp_one() returns -EINVAL on a frame shorter than ETH_HLEN without\nfreeing the page that vhost_net_build_xdp() allocated for it.\ntun_sendmsg() discards that -EINVAL and still returns total_len, so\nvhost_tx_batch() takes the success path and never frees the page; each\nshort frame in a batch leaks one page-frag chunk.\n\nA local process that can open /dev/net/tun and /dev/vhost-net can hit\nthis path: it attaches a tun/tap device as the vhost-net backend and\nfeeds TX descriptors whose length minus the virtio-net header is below\nETH_HLEN. Each kick leaks the page-frag chunks for that batch, and a\ntight submission loop exhausts host memory and triggers an OOM panic.\nFree the page before returning -EINVAL, matching the XDP-program error\npath in the same function.(CVE-2026-46321)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on build_skb failure in tun_xdp_one()\n\nWhen build_skb() fails in tun_xdp_one(), the function sets ret to\n-ENOMEM and jumps to the out label, which returns without freeing the\npage that vhost_net_build_xdp() allocated for the frame. As with the\nshort-frame rejection path, tun_sendmsg() discards the per-buffer error\nand still returns total_len, so vhost_tx_batch() takes the success path\nand never frees the page. Each build_skb() failure in a batch leaks one\npage-frag chunk.\n\nFree the page before taking the error path, matching the put_page() the\nother error exits of tun_xdp_one() already perform.(CVE-2026-46322)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0026apos;t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0026apos;t hold a reference\non the pages in shinfo-\u0026gt;frags. Appending those frags to another skb\u0026apos;s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0026apos;t merge the skbs.(CVE-2026-46323)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRevert \u0026quot;net/smc: Introduce TCP ULP support\u0026quot;\n\nThis reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40.\n\nAs reported by Al Viro, the TCP ULP support for SMC is fundamentally\nbroken. The implementation attempts to convert an active TCP socket\ninto an SMC socket by modifying the underlying `struct file`, dentry,\nand inode in-place, which violates core VFS invariants that assume\nthese structures are immutable for an open file, creating a risk of\nuse after free errors and general system instability.\n\nGiven the severity of this design flaw and the fact that cleaner\nalternatives (e.g., LD_PRELOAD, BPF) exist for legacy application\ntransparency, the correct course of action is to remove this feature\nentirely.(CVE-2026-46330)","status":"published","published":"2026-07-24T11:12:02Z","modified":"2026-08-18T01:21:25.869043975Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-31557","title":"CVE-2026-31557 in linux - Patched by Root","description":"Root has patched CVE-2026-31557 in the linux package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-18T03:18:11Z","modified":"2026-10-18T04:17:44.454996418Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"ROOT-OS-UBUNTU-2204-CVE-2026-31557","title":"CVE-2026-31557 in linux - Patched by Root","description":"Root has patched CVE-2026-31557 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.","status":"published","published":"2026-11-06T13:52:25Z","modified":"2026-11-06T14:17:12.879781547Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T14:57:22.607019Z"},{"id":"ROOT-OS-UBUNTU-2404-CVE-2026-31557","title":"CVE-2026-31557 in linux - Patched by Root","description":"Root has patched CVE-2026-31557 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.","status":"published","published":"2026-11-06T15:54:27Z","modified":"2026-11-06T16:16:44.886065237Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T16:59:13.602872Z"},{"id":"UBUNTU-CVE-2026-31557","description":"In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work off nvmet-wq For target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work. If nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue completion for the same worker:- A. Async event work queued on nvmet-wq (prior to disconnect):   nvmet_execute_async_event()      queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)   nvmet_add_async_event()      queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work) B. Full pre-work chain (RDMA CM path):   nvmet_rdma_cm_handler()      nvmet_rdma_queue_disconnect()        __nvmet_rdma_queue_disconnect()          queue_work(nvmet_wq, \u0026queue-\u003erelease_work)            process_one_work()              lock((wq_completion)nvmet-wq)  \u003c--------- 1st              nvmet_rdma_release_queue_work() C. Recursive path (same worker):   nvmet_rdma_release_queue_work()      nvmet_rdma_free_queue()        nvmet_sq_destroy()          nvmet_ctrl_put()            nvmet_ctrl_free()              flush_work(\u0026ctrl-\u003easync_event_work)                __flush_work()                  touch_wq_lockdep_map()                  lock((wq_completion)nvmet-wq) \u003c--------- 2nd Lockdep splat:   ============================================   WARNING: possible recursive locking detected   6.19.0-rc3nvme+ #14 Tainted: G                 N   --------------------------------------------   kworker/u192:42/44933 is trying to acquire lock:   ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90   but task is already holding lock:   ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660   3 locks held by kworker/u192:42/44933:    #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660    #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660    #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530   Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]   Call Trace:    __flush_work+0x268/0x530    nvmet_ctrl_free+0x140/0x310 [nvmet]    nvmet_cq_put+0x74/0x90 [nvmet]    nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]    nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]    process_one_work+0x206/0x660    worker_thread+0x184/0x320    kthread+0x10c/0x240    ret_from_fork+0x319/0x390 Move async event work to a dedicated nvmet-aen-wq to avoid reentrant flush on nvmet-wq.","status":"published","published":"2026-04-24T15:16:00Z","modified":"2026-11-11T09:39:36.135350933Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-11T10:01:31.493995Z"},{"id":"AZL-83630","title":"CVE-2026-31557 affecting package kernel 6.6.161.1-1","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: move async event work off nvmet-wq\n\nFor target nvmet_ctrl_free() flushes ctrl-\u003easync_event_work.\nIf nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue\ncompletion for the same worker:-\n\nA. Async event work queued on nvmet-wq (prior to disconnect):\n  nvmet_execute_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\n  nvmet_add_async_event()\n     queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work)\n\nB. Full pre-work chain (RDMA CM path):\n  nvmet_rdma_cm_handler()\n     nvmet_rdma_queue_disconnect()\n       __nvmet_rdma_queue_disconnect()\n         queue_work(nvmet_wq, \u0026queue-\u003erelease_work)\n           process_one_work()\n             lock((wq_completion)nvmet-wq)  \u003c--------- 1st\n             nvmet_rdma_release_queue_work()\n\nC. Recursive path (same worker):\n  nvmet_rdma_release_queue_work()\n     nvmet_rdma_free_queue()\n       nvmet_sq_destroy()\n         nvmet_ctrl_put()\n           nvmet_ctrl_free()\n             flush_work(\u0026ctrl-\u003easync_event_work)\n               __flush_work()\n                 touch_wq_lockdep_map()\n                 lock((wq_completion)nvmet-wq) \u003c--------- 2nd\n\nLockdep splat:\n\n  ============================================\n  WARNING: possible recursive locking detected\n  6.19.0-rc3nvme+ #14 Tainted: G                 N\n  --------------------------------------------\n  kworker/u192:42/44933 is trying to acquire lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n\n  but task is already holding lock:\n  ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n\n  3 locks held by kworker/u192:42/44933:\n   #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660\n   #1: ffffc9000e6cbe28 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660\n   #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n\n  Workqueue: nvmet-wq nvmet_rdma_release_queue_work [nvmet_rdma]\n  Call Trace:\n   __flush_work+0x268/0x530\n   nvmet_ctrl_free+0x140/0x310 [nvmet]\n   nvmet_cq_put+0x74/0x90 [nvmet]\n   nvmet_rdma_free_queue+0x23/0xe0 [nvmet_rdma]\n   nvmet_rdma_release_queue_work+0x19/0x50 [nvmet_rdma]\n   process_one_work+0x206/0x660\n   worker_thread+0x184/0x320\n   kthread+0x10c/0x240\n   ret_from_fork+0x319/0x390\n\nMove async event work to a dedicated nvmet-aen-wq to avoid reentrant\nflush on nvmet-wq.","status":"published","published":"2026-04-24T15:16:30Z","modified":"2026-11-05T14:17:18.288156353Z","updated_at":"2026-11-05T16:41:24.988217Z"},{"id":"CLSA-2026-1789986443","title":"kernel: Fix of 121 CVEs","description":"- dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}\n- mm/damon/core: validate ranges in damon_set_regions() {CVE-2026-68165}\n- netpoll: Fix deadlock in memory allocation under spinlock {CVE-2025-68169}\n- drm/amdkfd: Check bounds on CRIU restore queue type and mqd size {CVE-2026-68258}\n- gve: fix Rx queue stall on alloc failure {CVE-2026-68129}\n- drm/amdgpu: fix bo-\u003epin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}\n- libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE {CVE-2026-68159}\n- media: v4l2-ctrls: validate HEVC active reference counts {CVE-2026-68206}\n- drm/i915/hdcp: check streams[] bounds before overflow {CVE-2026-68253}\n- drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() {CVE-2026-68245}\n- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() {CVE-2026-68115}\n- drm/i915: Return NULL on error in active_instance {CVE-2026-68248}\n- smb: client: validate DFS referral PathConsumed {CVE-2026-68343}\n- ext4: fix use-after-free in update_super_work when racing with umount {CVE-2026-31446}\n- debugobjects: Plug race against a concurrent OOM disable {CVE-2026-68090}\n- HID: wacom: stop hardware after post-start probe failures {CVE-2026-68091}\n- drm/xe/pt: Reset current_op in xe_pt_update_ops_init() {CVE-2026-68264}\n- net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD {CVE-2026-68288}\n- drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() {CVE-2026-68113}\n- openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}\n- drm/amd/display: use kvzalloc to allocate struct dc {CVE-2026-68436}\n- drm/i915/gem: Add missing nospec on parallel submit slot {CVE-2026-68269}\n- Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update {CVE-2026-68394}\n- sctp: avoid auth_enable sysctl UAF during netns teardown {CVE-2026-68162}\n- wifi: mt76: mt7925: fix crash in reset link replay {CVE-2026-68307}\n- Bluetooth: hci_sync: extend conn_hash lookup critical sections {CVE-2026-68393}\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU {CVE-2026-68243}\n- block: fix memory leak in __blkdev_issue_zero_pages {CVE-2026-68348}\n- drm/amdgpu/gfx: fix cleaner shader IB buffer overflow {CVE-2026-68276}\n- tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails {CVE-2026-64173}\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin {CVE-2026-68362}\n- ovl: check access to copy_file_range source with src mounter creds {CVE-2026-68448}\n- drm/nouveau: fix reversed error cleanup order in ucopy functions {CVE-2026-68271}\n- vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size {CVE-2026-68446}\n- net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM {CVE-2026-68296}\n- Input: elan_i2c - prevent division by zero and arithmetic underflow {CVE-2026-64275}\n- iomap: fix out-of-bounds bitmap_set() with zero-length range {CVE-2026-68145}\n- vsock: fix lock inversion in vsock_assign_transport() {CVE-2025-40231}\n- ASoC: nau8821: Cancel delayed work on component remove {CVE-2026-45963}\n- ext4: validate p_idx bounds in ext4_ext_correct_indexes {CVE-2026-31449}\n- ipc: fix memleak if msg_init_ns failed in create_ipc_ns {CVE-2024-53175}\n- tls: make sure to abort the stream if headers are bogus {CVE-2025-39946}\n- ipv6: prevent infinite loop in rt6_nlmsg_size() {CVE-2025-38588}\n- gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL {CVE-2026-23386}\n- xsk: validate MTU against usable frame size on bind {CVE-2026-43092}\n- RDMA/irdma: Harden depth calculation functions {CVE-2026-31491}\n- iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() {CVE-2026-31505}\n- net/ip6_tunnel: Prevent perpetual tunnel growth {CVE-2025-40173}\n- net/mlx5: Fix deadlock between devlink lock and esw-\u003ewq {CVE-2026-43468}\n- mm/damon/sysfs: check contexts-\u003enr before accessing contexts_arr[0] {CVE-2026-31458}\n- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling {CVE-2026-52946}\n- nvmet: move async event work off nvmet-wq {CVE-2026-31557}\n- wifi: ath12k: Avoid memory leak while enabling statistics {CVE-2025-37743}\n- net: hns3: add vlan list lock to protect vlan list {CVE-2022-49182}\n- dmaengine: idxd: Fix leaking event log memory {CVE-2026-31440}\n- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup {CVE-2025-68192}\n- maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() {CVE-2025-38364}\n- vfs: Don't leak disconnected dentries on umount {CVE-2025-40105}\n- mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure {CVE-2026-23142}\n- mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure {CVE-2026-23142}\n- ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size {CVE-2026-52961}\n- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues {CVE-2026-23166}\n- mm/migrate: fix shmem xarray update during migration {CVE-2025-22015}\n- KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish {CVE-2026-31591}\n- mm: call -\u003efree_folio() directly in folio_unmap_invalidate() {CVE-2026-31589}\n- bpf: Check skb-\u003etransport_header is set in bpf_skb_check_mtu {CVE-2025-68363}\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds {CVE-2026-68391}\n- net: qrtr: restrict socket creation to the initial network namespace {CVE-2026-68294}\n- drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() {CVE-2026-68246}\n- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers {CVE-2026-68277}\n- drm/xe: Open-code GGTT MMIO access protection {CVE-2026-23466}\n- netfilter: conntrack: add missing netlink policy validations {CVE-2026-31407}\n- futex: Prevent use-after-free during requeue-PI {CVE-2025-39977}\n- net: openvswitch: fix middle attribute validation in push_nsh() action {CVE-2025-68785}\n- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption {CVE-2026-53281}\n- bpf: Free reuseport cBPF prog after RCU grace period {CVE-2026-52910}\n- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() {CVE-2026-31700}\n- net: mana: Use pci_name() for debugfs directory naming {CVE-2026-53324}\n- netfilter: ctnetlink: ignore explicit helper on new expectations {CVE-2026-43025}\n- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID {CVE-2025-40016}\n- net/mlx5: fw_tracer, Validate format string parameters {CVE-2025-68816}\n- ext4: avoid infinite loops caused by residual data {CVE-2026-31448}\n- Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ {CVE-2026-43134}\n- ext4: publish jinode after initialization {CVE-2026-31450}\n- drm/amdkfd: validate SVM ioctl nattr against buffer size {CVE-2026-46197}\n- drm/i915/gem: Fix phys BO pread/pwrite with offset {CVE-2026-53356}\n- net/mlx5: HWS, change error flow on matcher disconnect {CVE-2025-21751}\n- RDMA/irdma: Prevent rereg_mr for non-mem regions {CVE-2026-68419}\n- net/mlx5e: xsk: Fix unlocked writing to ICOSQ {CVE-2026-64210}\n- hwmon: (lm90) Add lock protection to lm90_alert {CVE-2026-64213}\n- RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}\n- RDMA/siw: Remove direct link to net_device {CVE-2024-57857}\n- tracing: Fix reading strings from synthetic events {CVE-2022-50255}\n- ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() {CVE-2026-43437}\n- HID: core: Mitigate potential OOB by removing bogus memset() {CVE-2026-43048}\n- xfrm: Wait for RCU readers during policy netns exit {CVE-2026-43091}\n- wifi: mac80211: fix FILS discovery and unsol BPR double free {CVE-2026-64568}\n- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation {CVE-2026-68257}\n- maple_tree: set MA_STATE_PREALLOC on zero-allocation early exits {CVE-2025-38364}\n- netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}\n- iommu/amd: serialize sequence allocation under concurrent TLB invalidations {CVE-2026-43253}\n- Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' {CVE-2025-38593}\n- Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete {CVE-2026-43059}\n- Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers {CVE-2026-43059}\n- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete {CVE-2026-43059}\n- ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF {CVE-2026-68398}\n- libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update {CVE-2026-68156}\n- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}\n- geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}\n- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}\n- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}\n- libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}\n- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}\n- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}\n- net/sched: act_tunnel_key: Defer dst_release to RCU callback {CVE-2026-68377}\n- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}\n- nfs: use nfsi-\u003erwsem to protect traversal of the file lock list {CVE-2026-72472}\n- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}\n- RDMA/umem: Fix truncation for block sizes \u003e= 4G {CVE-2026-53133}\n- xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() {CVE-2026-53250}\n- spi: imx: fix use-after-free on unbind {CVE-2026-45996}\n- xdp: produce a warning when calculated tailroom is negative {CVE-2026-23343}\n- cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() {CVE-2026-23327}\n- gve: Fix stats report corruption on queue count change {CVE-2026-23262}","status":"published","published":"2026-09-21T10:29:04Z","modified":"2026-10-26T09:43:19.659596137Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"openSUSE-SU-2026:21555-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).\n- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).\n- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).\n- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).\n- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).\n- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).\n- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).\n- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).\n- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).\n- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).\n- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).\n- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).\n- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).\n- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).\n- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).\n- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).\n- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).\n- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).\n- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).\n- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).\n- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).\n- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).\n- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).\n- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).\n- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).\n- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).\n- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).\n- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).\n- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).\n- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).\n- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).\n- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).\n- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).\n- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).\n- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).\n- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).\n- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).\n- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).\n- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).\n- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).\n- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).\n- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).\n- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).\n- CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).\n- CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).\n- CVE-2026-46036: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470).\n- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).\n- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).\n- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).\n- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).\n- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).\n- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).\n- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).\n- CVE-2026-46121: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (bsc#1266932).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46130: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629).\n- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).\n- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).\n- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).\n- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).\n- CVE-2026-46170: mptcp: disable add_addr retransmission when timeout is 0 (bsc#1267714).\n- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).\n- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).\n- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).\n- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).\n- CVE-2026-46216: drm/xe/hdcp: Add NULL check for media_gt in (bsc#1267234).\n- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).\n- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).\n- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).\n- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).\n- CVE-2026-46287: net: txgbe: fix RTNL assertion warning when remove module (bsc#1267954).\n- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).\n- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).\n- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).\n- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).\n- CVE-2026-46327: dm: fix unlocked test for dm_suspended_md (bsc#1268031).\n- CVE-2026-46329: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038).\n- CVE-2026-52913: batman-adv: v: stop OGMv2 on disabled interface (bsc#1268985).\n- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).\n- CVE-2026-52916: batman-adv: frag: disallow unicast fragment in fragment (bsc#1269002).\n- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).\n- CVE-2026-52922: batman-adv: dat: handle forward allocation error (bsc#1269030).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52926: batman-adv: clear current gateway during teardown (bsc#1269025).\n- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).\n- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).\n- CVE-2026-52934: batman-adv: tvlv: reject oversized TVLV packets (bsc#1268994).\n- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).\n- CVE-2026-52941: net/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint (bsc#1268966).\n- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).\n- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).\n- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).\n- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).\n- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).\n- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).\n- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).\n- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).\n- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).\n- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).\n- CVE-2026-52988: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (bsc#1269362).\n- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).\n- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).\n- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).\n- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).\n- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).\n- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).\n- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).\n- CVE-2026-53005: af_unix: Drop all SCM attributes for SOCKMAP (bsc#1269107).\n- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).\n- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).\n- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).\n- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).\n- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).\n- CVE-2026-53014: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir\n  (bsc#1269092).\n- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).\n- CVE-2026-53035: bpf, sockmap: Fix af_unix iter deadlock (bsc#1269190).\n- CVE-2026-53038: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).\n- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).\n- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).\n- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).\n- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).\n- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).\n- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).\n- CVE-2026-53085: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).\n- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).\n- CVE-2026-53101: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (bsc#1269415).\n- CVE-2026-53104: wifi: mt76: Fix memory leak destroying device (bsc#1269157).\n- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).\n- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).\n- CVE-2026-53121: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (bsc#1269198).\n- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).\n- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).\n- CVE-2026-53157: net: phonet: free phonet_device after RCU grace period (bsc#1269241).\n- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).\n- CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).\n- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).\n- CVE-2026-53184: udp: clear skb-\u003edev before running a sockmap verdict (bsc#1269689).\n- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).\n- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).\n- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).\n- CVE-2026-53210: tee: shm: fix shm leak in register_shm_helper() (bsc#1269727).\n- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).\n- CVE-2026-53214: ipv6: Fix a potential NPD in cleanup_prefix_route() (bsc#1269588).\n- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).\n- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).\n- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).\n- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).\n- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269801).\n- CVE-2026-53235: net: add pskb_may_pull() to skb_gro_receive_list() (bsc#1269286).\n- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).\n- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).\n- CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (bsc#1269235).\n- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).\n- CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev() (bsc#1269307).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).\n- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).\n- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).\n- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).\n- CVE-2026-53321: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).\n- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).\n- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).\n- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).\n- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).\n- CVE-2026-53393: nfsd: reset write verifier on deferred writeback errors (bsc#1271858).\n- CVE-2026-53394: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race (bsc#1271859).\n- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).\n- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).\n- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).\n- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).\n- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).\n- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).\n- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).\n- CVE-2026-63831: mac802154: llsec: add skb_cow_data() before in-place crypto (bsc#1272184).\n- CVE-2026-63836: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (bsc#1272246).\n- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).\n- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).\n- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).\n- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).\n- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).\n- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).\n- CVE-2026-64061: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).\n- CVE-2026-64091: batman-adv: tt: fix TOCTOU race for reported vlans (bsc#1272514).\n- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).\n- CVE-2026-64157: netfs: Fix partial invalidation of streaming-write folio (bsc#1272462).\n- CVE-2026-64158: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).\n- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).\n- CVE-2026-64357: xfs: fix exchmaps reservation limit check (bsc#1272612).\n- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).\n- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).\n- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Fix wrong register read in LNL failure diagnostics (git-fixes).\n- accel/ivpu: Reject firmware log with size smaller than header (git-fixes).\n- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).\n- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).\n- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).\n- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).\n- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).\n- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).\n- ALSA: scarlett2: Allow selecting config_set by firmware version (stable-fixes).\n- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (git-fixes).\n- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).\n- ALSA: seq: Fix division by zero in initialize_timer() (git-fixes).\n- ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (git-fixes).\n- ALSA: timer: don't re-enter an instance callback that is still running (git-fixes).\n- ALSA: timer: drain a slave's callback before its master detaches it (git-fixes).\n- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).\n- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).\n- ALSA: usb-audio: fix stack info leak in RME Digiface status (git-fixes).\n- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).\n- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).\n- apparmor: fix use-after-free in rawdata dedup loop (git-fixes).\n- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (git-fixes).\n- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).\n- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).\n- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).\n- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).\n- ASoC: cs42l43: Correct report for forced microphone jack (git-fixes).\n- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP (git-fixes).\n- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).\n- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).\n- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup (git-fixes).\n- ASoC: tas2562: fix DVC coefficient write order (git-fixes).\n- ASoC: tas2781: bound firmware description string parsing (git-fixes).\n- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).\n- batman-adv: bla: reacquire gw address after skb realloc (git-fixes).\n- batman-adv: dat: ensure accessible eth_hdr proto field (git-fixes).\n- batman-adv: dat: fix tie-break for candidate selection (git-fixes).\n- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).\n- batman-adv: fix VLAN priority offset (git-fixes).\n- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).\n- batman-adv: frag: free unfragmentable packet (git-fixes).\n- batman-adv: mcast: avoid OOB read of num_dests header (git-fixes).\n- batman-adv: tt: avoid request storms during pending request (git-fixes).\n- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).\n- bitops: use common function parameter names (git-fixes).\n- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).\n- Bluetooth: 6lowpan: Fix using chan-\u003econn as indication to no remote netdev (git-fixes).\n- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).\n- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).\n- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).\n- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).\n- Bluetooth: hci_qca: Clear memdump state on invalid dump size (git-fixes).\n- Bluetooth: hci_sync: Fix advertising data UAFs (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback (git-fixes).\n- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).\n- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).\n- Bluetooth: HIDP: validate numbered report payloads (git-fixes).\n- Bluetooth: ISO: clear iso_data always when detaching conn from hcon (git-fixes).\n- Bluetooth: ISO: fix CONNECTED -\u003e CLOSED transition on shutdown/release (git-fixes).\n- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).\n- Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() (git-fixes).\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).\n- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).\n- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).\n- Bluetooth: SCO: give the socket its own sco_conn reference (git-fixes).\n- btrfs: do not trim a device which is not writeable (bsc#1272568).\n- bus: sunxi-rsb: Always check register address validity (git-fixes).\n- can: bcm: add missing rcu list annotations and operations (git-fixes).\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).\n- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).\n- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).\n- can: ctucanfd: handle bus error interrupts (git-fixes).\n- can: ctucanfd: mark error-active controller status valid (git-fixes).\n- can: ctucanfd: unmap BAR0 using base address (git-fixes).\n- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).\n- can: ems_usb: validate CPC message lengths (git-fixes).\n- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).\n- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure (git-fixes).\n- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).\n- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).\n- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).\n- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).\n- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).\n- can: peak_usb: add bounds check for USB channel index (git-fixes).\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).\n- can: peak_usb: validate uCAN receive record lengths (git-fixes).\n- can: softing: fw_parse(): validate firmware record spans (git-fixes).\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).\n- comedi: comedi_parport: deal with premature interrupt (git-fixes).\n- crypto/xxhash: set downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: introduce downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: qat - keep VFs enabled during reset (stable-fixes).\n- crypto: qat - notify fatal error before AER reset preparation (stable-fixes).\n- dm cache policy smq: check allocation under invalidate lock (git-fixes).\n- dm cache: fix missing return in invalidate_committed's error path (git-fixes).\n- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).\n- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).\n- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).\n- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).\n- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).\n- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).\n- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).\n- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).\n- drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference (git-fixes).\n- drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips (git-fixes).\n- drm/amd/display: set new_stream to NULL after release (git-fixes).\n- drm/amd/display: use proper context for logging (git-fixes).\n- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).\n- drm/amd/pm: fix amdgpu_pm_info power display units (git-fixes).\n- drm/amd/pm: fix smu13 power limit range calculation (git-fixes).\n- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge (git-fixes).\n- drm/amdgpu: fix aperture mapping leak (git-fixes).\n- drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment (git-fixes).\n- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).\n- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).\n- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).\n- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() (git-fixes).\n- drm/gfx10: Program DB_RING_CONTROL (git-fixes).\n- drm/i915/bios: range check LFP Data Block panel_type2 (git-fixes).\n- drm/i915/gem: Do not leak siblings[] on proto context error (git-fixes).\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU (git-fixes).\n- drm/i915/gt: use correct selftest config symbol (git-fixes).\n- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).\n- drm/i915: ensure segment offset never exceeds allowed max (stable-fixes).\n- drm/i915: Return NULL on error in active_instance (git-fixes).\n- drm/imagination: acquire vm_ctx-\u003elock before mapping memory to GPU VM (git-fixes).\n- drm/imagination: Fix double call to drm_sched_entity_fini() (git-fixes).\n- drm/imagination: fix error checking of pvr_vm_context_lookup() (git-fixes).\n- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY (git-fixes).\n- drm/imagination: Fix user array stride in pvr_set_uobj_array() (git-fixes).\n- drm/mediatek: Check CRTC state before freeing (git-fixes).\n- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).\n- drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() (git-fixes).\n- drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced (git-fixes).\n- drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() (git-fixes).\n- drm/panthor: Interrupt group start/resumption if group_bind_locked() fails (git-fixes).\n- drm/panthor: reject firmware sections with oversized data (git-fixes).\n- drm/panthor: return error on truncated firmware (git-fixes).\n- drm/panthor: validate firmware interface structure sizes (git-fixes).\n- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).\n- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).\n- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem (git-fixes).\n- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup (git-fixes).\n- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).\n- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).\n- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).\n- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).\n- drm/virtio: bound EDID block reads to the response buffer (git-fixes).\n- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).\n- drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure (git-fixes).\n- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).\n- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).\n- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).\n- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).\n- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).\n- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).\n- drm/xe/hw_engine: Fix double-free of managed BO in error path (git-fixes).\n- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays (git-fixes).\n- drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() (git-fixes).\n- drm/xe/wopcm: fix WOPCM size for LNL+ (git-fixes).\n- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds (git-fixes).\n- drm/xe: remove duplicate \u003ckunit/test-bug.h\u003e include (git-fixes).\n- erofs: set fileio bio failed in short read case (git-fixes).\n- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).\n- fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() (git-fixes).\n- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).\n- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).\n- fbdev: hecubafb: fix potential memory leak in hecubafb_probe() (git-fixes).\n- fbdev: i740fb: fix potential memory leak in i740fb_probe() (git-fixes).\n- fbdev: metronomefb: fix potential memory leak in metronomefb_probe() (git-fixes).\n- fbdev: nvidia: fix potential memory leak in nvidiafb_probe() (git-fixes).\n- fbdev: radeon: fix potential memory leak in radeonfb_pci_register() (git-fixes).\n- fbdev: s3fb: fix potential memory leak in s3_pci_probe() (git-fixes).\n- fbdev: sm501fb: Fix buffer errors in OF binding code (git-fixes).\n- fbdev: sm712: Fix operator precedence in big_swap macro (git-fixes).\n- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() (git-fixes).\n- fbdev: tridentfb: fix potential memory leak in trident_pci_probe() (git-fixes).\n- fbdev: uvesafb: fix potential memory leak in uvesafb_probe() (git-fixes).\n- fbdev: vesafb: fix memory leak in vesafb_probe() (git-fixes).\n- firewire: net: Fix fragmented datagram reassembly (git-fixes).\n- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).\n- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (git-fixes).\n- gpio-f7188x: Add support for NCT6126D version B (git-fixes).\n- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure (git-fixes).\n- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).\n- gpio: htc-egpio: use managed gpiochip registration (git-fixes).\n- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: free generic chips on unbind (git-fixes).\n- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).\n- gpio: rockchip: change the GPIO version judgment logic (stable-fixes).\n- gpio: rockchip: fix generic IRQ chip leak on remove (git-fixes).\n- gpio: rockchip: teardown bugs and resource leaks (git-fixes).\n- gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() (git-fixes).\n- gpio: tegra: do not call pinctrl for GPIO direction (git-fixes).\n- gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- gpios: palmas: add .get_direction() op (git-fixes).\n- HID: add haptics page defines (stable-fixes).\n- HID: hid-sjoy: race between init and usage (git-fixes).\n- HID: pidff: Add missing spaces (stable-fixes).\n- HID: pidff: Fix missing blank lines after declarations (stable-fixes).\n- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).\n- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).\n- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).\n- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).\n- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).\n- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).\n- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).\n- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).\n- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).\n- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).\n- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).\n- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).\n- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).\n- hwmon: (ltc4282) Fix reading the minimum alarm voltage (git-fixes).\n- hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (git-fixes).\n- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).\n- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).\n- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (nzxt-smart2) DMA-align output buffer (git-fixes).\n- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).\n- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).\n- hwmon: (sht3x) Fix unaligned accesses (git-fixes).\n- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).\n- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).\n- hwmon: occ: validate poll response sensor blocks (git-fixes).\n- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).\n- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).\n- i2c: imx: Fix slave registration race and error handling (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).\n- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).\n- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).\n- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).\n- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).\n- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).\n- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).\n- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).\n- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).\n- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).\n- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).\n- iio: accel: bmc150: clamp the device-reported FIFO frame count (git-fixes).\n- iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (git-fixes).\n- iio: adc: lpc32xx: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: spear: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: ti-ads124s08: Return reset GPIO lookup errors (git-fixes).\n- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable (git-fixes).\n- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).\n- iio: event: Fix event FIFO reset race (git-fixes).\n- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ (git-fixes).\n- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ (git-fixes).\n- iio: imu: inv_icm42600: fix timestamp clock period by using lower value (git-fixes).\n- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading (git-fixes).\n- iio: imu: st_lsm6dsx: deselect shub page before reading whoami (git-fixes).\n- iio: light: al3010: fix incorrect scale for the highest gain range (git-fixes).\n- iio: light: gp2ap002: fix runtime PM leak on read error (git-fixes).\n- iio: light: tsl2591: return actual error from probe IRQ failure (git-fixes).\n- iio: magnetometer: ak8975: fix potential kernel stack memory leak (git-fixes).\n- iio: temperature: Build mlx90635 with CONFIG_MLX90635 (git-fixes).\n- Input: ads7846 - restore half-duplex support (git-fixes).\n- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).\n- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).\n- Input: goodix - clamp the device-reported contact count (git-fixes).\n- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).\n- Input: ims-pcu - add response length checks (git-fixes).\n- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).\n- Input: ims-pcu - fix firmware leak in async update (git-fixes).\n- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).\n- Input: ims-pcu - fix logic error in packet reset (git-fixes).\n- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).\n- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).\n- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).\n- Input: ims-pcu - only expose sysfs attributes on control interface (git-fixes).\n- Input: ims-pcu - release data interface on disconnect (git-fixes).\n- Input: ims-pcu - validate control endpoint type (git-fixes).\n- Input: maple_keyb - set driver data before registering input device (stable-fixes).\n- Input: maplecontrol - set driver data before registering input device (stable-fixes).\n- Input: maplemouse - fix NULL pointer dereference in open() (git-fixes).\n- Input: maplemouse - set driver data before registering input device (stable-fixes).\n- Input: mms114 - fix multi-touch slot corruption (git-fixes).\n- Input: mms114 - fix touch indexing for MMS134S and MMS136 (git-fixes).\n- Input: mms114 - reject an oversized device packet size (git-fixes).\n- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).\n- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).\n- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).\n- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).\n- Input: rmi4 - fix register descriptor address calculation (git-fixes).\n- Input: rmi4 - fix type overflow in register counts (git-fixes).\n- Input: rmi4 - initialize attn_fifo properly (stable-fixes).\n- Input: rmi4 - iterative IRQ handler (git-fixes).\n- Input: rmi4 - refactor F12 probe function (stable-fixes).\n- Input: rmi4 - refactor function allocation and registration (stable-fixes).\n- Input: rmi4 - refactor register descriptor parsing (git-fixes).\n- Input: rmi4 - tolerate short register descriptor structure (git-fixes).\n- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).\n- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (git-fixes).\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (git-fixes).\n- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).\n- Input: touchwin - reset the packet index on every complete packet (git-fixes).\n- intel_th: core: fix null pointer dereference in intel_th_irq (bsc#1248480).\n- intel_th: fix MSC output device reference leak (git-fixes).\n- io_uring/kbuf: don't truncate end buffer for bundles (bsc#1271290).\n- io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF (bsc#1261250).\n- io_uring/kbuf: flag partial buffer mappings (bsc#1271290).\n- io_uring/kbuf: propagate BUF_MORE through early buffer commit path (bsc#1261250).\n- io_uring/net: always use current transfer count for buffer put (git-fixes).\n- io_uring/net: improve recv bundles (bsc#1271290).\n- io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries (bsc#1271290).\n- io_uring/net: only consider msg_inq if larger than 1 (git-fixes).\n- io_uring/net: only retry recv bundle for a full transfer (bsc#1271290).\n- io_uring/timeout: add helper for parsing user time (bsc#1271291).\n- io_uring/timeout: honour caller's time namespace for IORING_TIMEOUT_ABS (bsc#1271291).\n- io_uring/timeout: migrate reqs from ts64 to ktime (bsc#1271291).\n- io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER (bsc#1271291).\n- ixgbe: reduce number of reads when getting OROM data (bsc#1269637).\n- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT (git-fixes).\n- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (git-fixes).\n- KVM: nSVM: Clear tracking of L1-\u003eL2 NMI and soft IRQ on nested #VMEXIT (git-fixes).\n- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).\n- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (git-fixes).\n- KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs (git-fixes).\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).\n- KVM: TDX: Reject concurrent change to CPUID entry count (git-fixes).\n- KVM: x86/mmu: Check write tracking in all address spaces (git-fixes).\n- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).\n- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).\n- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).\n- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN (git-fixes).\n- leds: uleds: Fix potential buffer overread (git-fixes).\n- mac802154: hold an interface reference across the scan worker (git-fixes).\n- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).\n- mac802154: Prevent overwrite return code in mac802154_perform_association() (git-fixes).\n- mac802154: remove interfaces with RCU list deletion (git-fixes).\n- mailbox: zynqmp: setup IPI for each valid child node (bsc#1271395).\n- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (bsc#1266694).\n- media: aspeed: fix missing of_reserved_mem_device_release() on probe failure (git-fixes).\n- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).\n- media: atomisp: gc2235: fix UAF and memory leak (git-fixes).\n- media: cec: seco: unregister adapter on IR probe failure (git-fixes).\n- media: cedrus: Fix failure to clean up hardware on probe failure (git-fixes).\n- media: cedrus: Fix missing cleanup in error path (git-fixes).\n- media: cedrus: skip invalid H.264 reference list entries (git-fixes).\n- media: marvell-cam: fix missing pci_disable_device() on remove (git-fixes).\n- media: mtk-jpeg: cancel workqueue on release for supported platforms only (git-fixes).\n- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).\n- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).\n- media: pci: dm1105: Free allocated workqueue (git-fixes).\n- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite (git-fixes).\n- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).\n- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).\n- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).\n- media: rockchip: rga: fix too small buffer size (git-fixes).\n- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).\n- media: ti: vpe: unwind v4l2 device registration on probe error (git-fixes).\n- media: uvcvideo: Avoid partial metadata buffers (git-fixes).\n- media: uvcvideo: Do not add clock samples with small sof delta (git-fixes).\n- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).\n- media: uvcvideo: Fix dev_sof filtering in hw timestamp (git-fixes).\n- media: uvcvideo: Fix sequence number when no EOF (git-fixes).\n- media: uvcvideo: Relax the constrains for interpolating the hw clock (git-fixes).\n- media: uvcvideo: Use hw timestaming if the clock buffer is full (git-fixes).\n- media: v4l2-common: Add YUV24 format info (git-fixes).\n- media: v4l2-ctrls: validate HEVC active reference counts (git-fixes).\n- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (git-fixes).\n- media: vidtv: fix reference leak on failed device registration (git-fixes).\n- media: vimc: fix reference leak on failed device registration (git-fixes).\n- media: vpif_capture: fix OF node reference imbalance (git-fixes).\n- mei: bus: access mei_device under device_lock on cleanup (git-fixes).\n- memory: tegra: Wire up system sleep PM ops (git-fixes).\n- memstick: ms_block: reject a card that reports too many blocks (git-fixes).\n- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).\n- mfd: cs42l43: Sanity check firmware size (git-fixes).\n- mfd: rsmu: Fix page register setup (git-fixes).\n- mfd: sm501: Fix reference leak on failed device registration (git-fixes).\n- mfd: tps6586x: Fix OF node refcount (git-fixes).\n- misc: nsm: only unlock nsm_dev on post-lock error paths (git-fixes).\n- misc: nsm: pin the module while the device is open (git-fixes).\n- mkspec-dtb: Skip missing DTBs.\n- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).\n- mmc: block: fix RPMB device unregister ordering (git-fixes).\n- mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method (git-fixes).\n- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).\n- mshv: fix hv_input_get_system_property struct (git-fixes).\n- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).\n- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).\n- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).\n- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).\n- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).\n- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).\n- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).\n- net: mana: Add Interrupt Moderation support (bsc#1271368).\n- net: mana: Return error code from mana_create_rxq() (git-fixes).\n- net: mctp i2c: Copy headers if cloned (bsc#1266694).\n- net: mctp-i2c: fix duplicate reception of old data (bsc#1266694).\n- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).\n- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).\n- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).\n- net: wwan: t7xx: check skb_clone in control TX (git-fixes).\n- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).\n- netfs: Defer the emission of trace_netfs_folio() (git-fixes).\n- of: cpu: add check in __of_find_n_match_cpu_property() (git-fixes).\n- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (git-fixes).\n- phy: phy-can-transceiver: Check driver match and driver data against NULL (git-fixes).\n- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).\n- phy: zynqmp: fix runtime PM leak on probe allocation failure (git-fixes).\n- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).\n- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).\n- pinctrl-amd: Don't clear S4 wake bits at probe (git-fixes).\n- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).\n- pinctrl: cs42l43: Fix polarity on debounce (git-fixes).\n- pinctrl: devicetree: don't free uninitialized dev_name on error path (git-fixes).\n- pinctrl: equilibrium: fix warning trace on load (git-fixes).\n- pinctrl: equilibrium: rename irq_chip function callbacks (stable-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: meson: restore non-sleeping GPIO access (git-fixes).\n- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table (git-fixes).\n- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).\n- pinctrl: qcom: Unconditionally mark gpio as wakeup enable (git-fixes).\n- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path (git-fixes).\n- pkspec-dtb: Fix dtb-al rename.\n- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).\n- platform/x86/amd/pmc: Avoid logging \"(null)\" for DMI values (git-fixes).\n- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).\n- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).\n- platform/x86/amd/pmc: Don't log during intermediate wakeups (stable-fixes).\n- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (git-fixes).\n- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).\n- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).\n- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912).\n- posix-timers: Add proper state tracking (bsc#1271912).\n- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).\n- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).\n- power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() (git-fixes).\n- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).\n- power: supply: max17040: handle missing status supplier (git-fixes).\n- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).\n- regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (git-fixes).\n- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).\n- regulator: mt6358: use regmap helper to read fixed LDO calibration (git-fixes).\n- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).\n- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).\n- Revert \"Input: rmi4 - fix register descriptor address calculation\" (stable-fixes).\n- sctp: validate embedded address parameter length (git-fixes).\n- security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() (git-fixes).\n- selftests: Disable dad for ipv6 in fcnal-test.sh (bsc#1272871).\n- selftests: Replace sleep with slowwait (bsc#1272871).\n- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).\n- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).\n- serial: 8250_omap: clear rx_running on zero-length DMA completes (git-fixes).\n- serial: msm: Disable DMA for kernel console UART (git-fixes).\n- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).\n- soc: fsl: qe: panic on ioremap() failure in qe_reset() (git-fixes).\n- soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy (git-fixes).\n- soc: xilinx: Shutdown and free rx mailbox channel (git-fixes).\n- spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure (git-fixes).\n- spi: sh-msiof: abort transfers when reset times out (git-fixes).\n- staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() (git-fixes).\n- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).\n- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).\n- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).\n- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB write in HT_caps_handler() (git-fixes).\n- staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (git-fixes).\n- thermal: core: Free thermal zone ID later during removal (git-fixes).\n- time: Switch to hrtimer_setup() (bsc#1271912).\n- tpm: Make the TPM character devices non-seekable (git-fixes).\n- uio_hv_generic: Bind to FCopy device by default (git-fixes).\n- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).\n- usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() (git-fixes).\n- USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (git-fixes).\n- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).\n- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).\n- usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() (git-fixes).\n- usb: dwc3: run gadget disconnect from sleepable suspend context (git-fixes).\n- usb: free iso schedules on failed submit (git-fixes).\n- usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (git-fixes).\n- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).\n- usb: gadget: f_fs: Fix DMA fence leak (git-fixes).\n- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).\n- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).\n- usb: gadget: f_printer: take kref only for successful open (git-fixes).\n- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: function: rndis: add length check for header (stable-fixes).\n- usb: gadget: function: rndis: add length check to response query (stable-fixes).\n- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).\n- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).\n- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).\n- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).\n- USB: idmouse: fix use-after-free on disconnect race (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).\n- usb: iowarrior: remove inherent race with minor number (stable-fixes).\n- USB: ldusb: fix use-after-free on disconnect race (git-fixes).\n- USB: legousbtower: fix use-after-free on disconnect race (git-fixes).\n- USB: misc: uss720: unregister parport on probe failure (git-fixes).\n- usb: mtu3: unmap request DMA on queue failure (git-fixes).\n- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).\n- USB: serial: digi_acceleport: fix broken rx after throttle (git-fixes).\n- USB: serial: digi_acceleport: fix hard lockup on disconnect (git-fixes).\n- USB: serial: digi_acceleport: fix write buffer corruption (git-fixes).\n- USB: serial: io_edgeport: cap received transmit credits (git-fixes).\n- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).\n- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).\n- USB: serial: keyspan_pda: fix information leak (git-fixes).\n- USB: serial: mxuport: validate firmware header size (git-fixes).\n- USB: serial: option: add MeiG SRM813Q (stable-fixes).\n- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).\n- usb: sl811-hcd: disable controller wakeup on remove (git-fixes).\n- USB: storage: include US_FL_NO_SAME in quirks mask (git-fixes).\n- usb: typec: anx7411: use devm_pm_runtime_enable() (git-fixes).\n- usb: typec: class: drop PD lookup reference (git-fixes).\n- usb: typec: tcpm: Fix VDM type for Enter Mode commands (git-fixes).\n- usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (git-fixes).\n- usb: typec: ucsi: cancel pending work on system suspend (git-fixes).\n- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove (git-fixes).\n- usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware (git-fixes).\n- usb: typec: ucsi: Invert DisplayPort role assignment (git-fixes).\n- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode (git-fixes).\n- USB: ulpi: fix memory leak on registration failure (git-fixes).\n- USB: usb-storage: ene_ub6250: restore media-ready check (git-fixes).\n- usb: xhci: Fix sleep in atomic context in xhci_free_streams() (git-fixes).\n- usbip: tools: support SuperSpeedPlus devices (git-fixes).\n- usbip: vudc: fix NULL deref in vep_dequeue() (git-fixes).\n- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).\n- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).\n- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).\n- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).\n- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (git-fixes).\n- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).\n- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).\n- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).\n- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).\n- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).\n- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).\n- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).\n- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).\n- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).\n- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).\n- wifi: mac80211: tear down new links on vif update error path (git-fixes).\n- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).\n- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).\n- wifi: mt76: Disable napi when removing device (git-fixes).\n- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).\n- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: fix crash in reset link replay (git-fixes).\n- wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() (git-fixes).\n- wifi: mt76: mt7925: guard link STA in decap offload (git-fixes).\n- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).\n- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).\n- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).\n- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).\n- wifi: mwifiex: fix roaming to different channel in host_mlme mode (git-fixes).\n- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).\n- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).\n- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).\n- xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).\n- xfs: only assert new size for datafork during truncate extents (bsc#1264084).\n- xfs: rearrange code in xfs_inode_item_precommit (bsc#1237449).\n- xfs: rework datasync tracking and execution (bsc#1237449).\n- xhci: dbgtty: fix device unregister (git-fixes).\n- xhci: dbgtty: fix device unregister: fixup (git-fixes).\n","status":"published","published":"2026-08-12T01:09:28Z","modified":"2026-08-12T17:45:23.234348653Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:23066-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).\n- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).\n- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).\n- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).\n- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).\n- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).\n- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).\n- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).\n- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).\n- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).\n- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).\n- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).\n- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).\n- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).\n- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).\n- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).\n- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).\n- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).\n- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).\n- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).\n- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).\n- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).\n- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).\n- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).\n- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).\n- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).\n- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).\n- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).\n- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).\n- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).\n- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).\n- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).\n- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).\n- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).\n- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).\n- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).\n- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).\n- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).\n- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).\n- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).\n- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).\n- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).\n- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).\n- CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).\n- CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).\n- CVE-2026-46036: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470).\n- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).\n- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).\n- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).\n- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).\n- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).\n- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).\n- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).\n- CVE-2026-46121: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (bsc#1266932).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46130: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629).\n- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).\n- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).\n- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).\n- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).\n- CVE-2026-46170: mptcp: disable add_addr retransmission when timeout is 0 (bsc#1267714).\n- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).\n- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).\n- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).\n- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).\n- CVE-2026-46216: drm/xe/hdcp: Add NULL check for media_gt in (bsc#1267234).\n- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).\n- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).\n- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).\n- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).\n- CVE-2026-46287: net: txgbe: fix RTNL assertion warning when remove module (bsc#1267954).\n- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).\n- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).\n- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).\n- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).\n- CVE-2026-46327: dm: fix unlocked test for dm_suspended_md (bsc#1268031).\n- CVE-2026-46329: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038).\n- CVE-2026-52913: batman-adv: v: stop OGMv2 on disabled interface (bsc#1268985).\n- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).\n- CVE-2026-52916: batman-adv: frag: disallow unicast fragment in fragment (bsc#1269002).\n- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).\n- CVE-2026-52922: batman-adv: dat: handle forward allocation error (bsc#1269030).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52926: batman-adv: clear current gateway during teardown (bsc#1269025).\n- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).\n- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).\n- CVE-2026-52934: batman-adv: tvlv: reject oversized TVLV packets (bsc#1268994).\n- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).\n- CVE-2026-52941: net/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint (bsc#1268966).\n- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).\n- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).\n- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).\n- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).\n- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).\n- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).\n- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).\n- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).\n- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).\n- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).\n- CVE-2026-52988: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (bsc#1269362).\n- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).\n- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).\n- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).\n- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).\n- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).\n- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).\n- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).\n- CVE-2026-53005: af_unix: Drop all SCM attributes for SOCKMAP (bsc#1269107).\n- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).\n- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).\n- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).\n- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).\n- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).\n- CVE-2026-53014: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir\n  (bsc#1269092).\n- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).\n- CVE-2026-53035: bpf, sockmap: Fix af_unix iter deadlock (bsc#1269190).\n- CVE-2026-53038: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).\n- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).\n- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).\n- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).\n- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).\n- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).\n- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).\n- CVE-2026-53085: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).\n- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).\n- CVE-2026-53101: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (bsc#1269415).\n- CVE-2026-53104: wifi: mt76: Fix memory leak destroying device (bsc#1269157).\n- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).\n- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).\n- CVE-2026-53121: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (bsc#1269198).\n- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).\n- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).\n- CVE-2026-53157: net: phonet: free phonet_device after RCU grace period (bsc#1269241).\n- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).\n- CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).\n- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).\n- CVE-2026-53184: udp: clear skb-\u003edev before running a sockmap verdict (bsc#1269689).\n- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).\n- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).\n- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).\n- CVE-2026-53210: tee: shm: fix shm leak in register_shm_helper() (bsc#1269727).\n- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).\n- CVE-2026-53214: ipv6: Fix a potential NPD in cleanup_prefix_route() (bsc#1269588).\n- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).\n- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).\n- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).\n- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).\n- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269801).\n- CVE-2026-53235: net: add pskb_may_pull() to skb_gro_receive_list() (bsc#1269286).\n- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).\n- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).\n- CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (bsc#1269235).\n- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).\n- CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev() (bsc#1269307).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).\n- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).\n- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).\n- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).\n- CVE-2026-53321: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).\n- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).\n- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).\n- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).\n- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).\n- CVE-2026-53393: nfsd: reset write verifier on deferred writeback errors (bsc#1271858).\n- CVE-2026-53394: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race (bsc#1271859).\n- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).\n- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).\n- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).\n- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).\n- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).\n- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).\n- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).\n- CVE-2026-63831: mac802154: llsec: add skb_cow_data() before in-place crypto (bsc#1272184).\n- CVE-2026-63836: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (bsc#1272246).\n- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).\n- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).\n- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).\n- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).\n- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).\n- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).\n- CVE-2026-64061: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).\n- CVE-2026-64091: batman-adv: tt: fix TOCTOU race for reported vlans (bsc#1272514).\n- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).\n- CVE-2026-64157: netfs: Fix partial invalidation of streaming-write folio (bsc#1272462).\n- CVE-2026-64158: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).\n- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).\n- CVE-2026-64357: xfs: fix exchmaps reservation limit check (bsc#1272612).\n- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).\n- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).\n- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Fix wrong register read in LNL failure diagnostics (git-fixes).\n- accel/ivpu: Reject firmware log with size smaller than header (git-fixes).\n- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).\n- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).\n- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).\n- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).\n- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).\n- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).\n- ALSA: scarlett2: Allow selecting config_set by firmware version (stable-fixes).\n- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (git-fixes).\n- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).\n- ALSA: seq: Fix division by zero in initialize_timer() (git-fixes).\n- ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (git-fixes).\n- ALSA: timer: don't re-enter an instance callback that is still running (git-fixes).\n- ALSA: timer: drain a slave's callback before its master detaches it (git-fixes).\n- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).\n- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).\n- ALSA: usb-audio: fix stack info leak in RME Digiface status (git-fixes).\n- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).\n- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).\n- apparmor: fix use-after-free in rawdata dedup loop (git-fixes).\n- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (git-fixes).\n- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).\n- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).\n- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).\n- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).\n- ASoC: cs42l43: Correct report for forced microphone jack (git-fixes).\n- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP (git-fixes).\n- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).\n- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).\n- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup (git-fixes).\n- ASoC: tas2562: fix DVC coefficient write order (git-fixes).\n- ASoC: tas2781: bound firmware description string parsing (git-fixes).\n- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).\n- batman-adv: bla: reacquire gw address after skb realloc (git-fixes).\n- batman-adv: dat: ensure accessible eth_hdr proto field (git-fixes).\n- batman-adv: dat: fix tie-break for candidate selection (git-fixes).\n- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).\n- batman-adv: fix VLAN priority offset (git-fixes).\n- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).\n- batman-adv: frag: free unfragmentable packet (git-fixes).\n- batman-adv: mcast: avoid OOB read of num_dests header (git-fixes).\n- batman-adv: tt: avoid request storms during pending request (git-fixes).\n- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).\n- bitops: use common function parameter names (git-fixes).\n- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).\n- Bluetooth: 6lowpan: Fix using chan-\u003econn as indication to no remote netdev (git-fixes).\n- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).\n- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).\n- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).\n- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).\n- Bluetooth: hci_qca: Clear memdump state on invalid dump size (git-fixes).\n- Bluetooth: hci_sync: Fix advertising data UAFs (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback (git-fixes).\n- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).\n- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).\n- Bluetooth: HIDP: validate numbered report payloads (git-fixes).\n- Bluetooth: ISO: clear iso_data always when detaching conn from hcon (git-fixes).\n- Bluetooth: ISO: fix CONNECTED -\u003e CLOSED transition on shutdown/release (git-fixes).\n- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).\n- Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() (git-fixes).\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).\n- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).\n- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).\n- Bluetooth: SCO: give the socket its own sco_conn reference (git-fixes).\n- btrfs: do not trim a device which is not writeable (bsc#1272568).\n- bus: sunxi-rsb: Always check register address validity (git-fixes).\n- can: bcm: add missing rcu list annotations and operations (git-fixes).\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).\n- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).\n- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).\n- can: ctucanfd: handle bus error interrupts (git-fixes).\n- can: ctucanfd: mark error-active controller status valid (git-fixes).\n- can: ctucanfd: unmap BAR0 using base address (git-fixes).\n- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).\n- can: ems_usb: validate CPC message lengths (git-fixes).\n- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).\n- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure (git-fixes).\n- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).\n- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).\n- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).\n- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).\n- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).\n- can: peak_usb: add bounds check for USB channel index (git-fixes).\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).\n- can: peak_usb: validate uCAN receive record lengths (git-fixes).\n- can: softing: fw_parse(): validate firmware record spans (git-fixes).\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).\n- comedi: comedi_parport: deal with premature interrupt (git-fixes).\n- crypto/xxhash: set downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: introduce downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: qat - keep VFs enabled during reset (stable-fixes).\n- crypto: qat - notify fatal error before AER reset preparation (stable-fixes).\n- dm cache policy smq: check allocation under invalidate lock (git-fixes).\n- dm cache: fix missing return in invalidate_committed's error path (git-fixes).\n- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).\n- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).\n- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).\n- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).\n- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).\n- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).\n- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).\n- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).\n- drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference (git-fixes).\n- drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips (git-fixes).\n- drm/amd/display: set new_stream to NULL after release (git-fixes).\n- drm/amd/display: use proper context for logging (git-fixes).\n- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).\n- drm/amd/pm: fix amdgpu_pm_info power display units (git-fixes).\n- drm/amd/pm: fix smu13 power limit range calculation (git-fixes).\n- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge (git-fixes).\n- drm/amdgpu: fix aperture mapping leak (git-fixes).\n- drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment (git-fixes).\n- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).\n- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).\n- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).\n- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() (git-fixes).\n- drm/gfx10: Program DB_RING_CONTROL (git-fixes).\n- drm/i915/bios: range check LFP Data Block panel_type2 (git-fixes).\n- drm/i915/gem: Do not leak siblings[] on proto context error (git-fixes).\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU (git-fixes).\n- drm/i915/gt: use correct selftest config symbol (git-fixes).\n- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).\n- drm/i915: ensure segment offset never exceeds allowed max (stable-fixes).\n- drm/i915: Return NULL on error in active_instance (git-fixes).\n- drm/imagination: acquire vm_ctx-\u003elock before mapping memory to GPU VM (git-fixes).\n- drm/imagination: Fix double call to drm_sched_entity_fini() (git-fixes).\n- drm/imagination: fix error checking of pvr_vm_context_lookup() (git-fixes).\n- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY (git-fixes).\n- drm/imagination: Fix user array stride in pvr_set_uobj_array() (git-fixes).\n- drm/mediatek: Check CRTC state before freeing (git-fixes).\n- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).\n- drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() (git-fixes).\n- drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced (git-fixes).\n- drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() (git-fixes).\n- drm/panthor: Interrupt group start/resumption if group_bind_locked() fails (git-fixes).\n- drm/panthor: reject firmware sections with oversized data (git-fixes).\n- drm/panthor: return error on truncated firmware (git-fixes).\n- drm/panthor: validate firmware interface structure sizes (git-fixes).\n- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).\n- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).\n- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem (git-fixes).\n- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup (git-fixes).\n- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).\n- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).\n- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).\n- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).\n- drm/virtio: bound EDID block reads to the response buffer (git-fixes).\n- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).\n- drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure (git-fixes).\n- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).\n- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).\n- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).\n- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).\n- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).\n- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).\n- drm/xe/hw_engine: Fix double-free of managed BO in error path (git-fixes).\n- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays (git-fixes).\n- drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() (git-fixes).\n- drm/xe/wopcm: fix WOPCM size for LNL+ (git-fixes).\n- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds (git-fixes).\n- drm/xe: remove duplicate \u003ckunit/test-bug.h\u003e include (git-fixes).\n- erofs: set fileio bio failed in short read case (git-fixes).\n- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).\n- fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() (git-fixes).\n- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).\n- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).\n- fbdev: hecubafb: fix potential memory leak in hecubafb_probe() (git-fixes).\n- fbdev: i740fb: fix potential memory leak in i740fb_probe() (git-fixes).\n- fbdev: metronomefb: fix potential memory leak in metronomefb_probe() (git-fixes).\n- fbdev: nvidia: fix potential memory leak in nvidiafb_probe() (git-fixes).\n- fbdev: radeon: fix potential memory leak in radeonfb_pci_register() (git-fixes).\n- fbdev: s3fb: fix potential memory leak in s3_pci_probe() (git-fixes).\n- fbdev: sm501fb: Fix buffer errors in OF binding code (git-fixes).\n- fbdev: sm712: Fix operator precedence in big_swap macro (git-fixes).\n- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() (git-fixes).\n- fbdev: tridentfb: fix potential memory leak in trident_pci_probe() (git-fixes).\n- fbdev: uvesafb: fix potential memory leak in uvesafb_probe() (git-fixes).\n- fbdev: vesafb: fix memory leak in vesafb_probe() (git-fixes).\n- firewire: net: Fix fragmented datagram reassembly (git-fixes).\n- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).\n- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (git-fixes).\n- gpio-f7188x: Add support for NCT6126D version B (git-fixes).\n- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure (git-fixes).\n- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).\n- gpio: htc-egpio: use managed gpiochip registration (git-fixes).\n- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: free generic chips on unbind (git-fixes).\n- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).\n- gpio: rockchip: change the GPIO version judgment logic (stable-fixes).\n- gpio: rockchip: fix generic IRQ chip leak on remove (git-fixes).\n- gpio: rockchip: teardown bugs and resource leaks (git-fixes).\n- gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() (git-fixes).\n- gpio: tegra: do not call pinctrl for GPIO direction (git-fixes).\n- gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- gpios: palmas: add .get_direction() op (git-fixes).\n- HID: add haptics page defines (stable-fixes).\n- HID: hid-sjoy: race between init and usage (git-fixes).\n- HID: pidff: Add missing spaces (stable-fixes).\n- HID: pidff: Fix missing blank lines after declarations (stable-fixes).\n- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).\n- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).\n- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).\n- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).\n- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).\n- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).\n- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).\n- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).\n- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).\n- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).\n- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).\n- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).\n- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).\n- hwmon: (ltc4282) Fix reading the minimum alarm voltage (git-fixes).\n- hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (git-fixes).\n- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).\n- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).\n- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (nzxt-smart2) DMA-align output buffer (git-fixes).\n- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).\n- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).\n- hwmon: (sht3x) Fix unaligned accesses (git-fixes).\n- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).\n- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).\n- hwmon: occ: validate poll response sensor blocks (git-fixes).\n- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).\n- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).\n- i2c: imx: Fix slave registration race and error handling (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).\n- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).\n- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).\n- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).\n- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).\n- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).\n- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).\n- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).\n- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).\n- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).\n- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).\n- iio: accel: bmc150: clamp the device-reported FIFO frame count (git-fixes).\n- iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (git-fixes).\n- iio: adc: lpc32xx: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: spear: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: ti-ads124s08: Return reset GPIO lookup errors (git-fixes).\n- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable (git-fixes).\n- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).\n- iio: event: Fix event FIFO reset race (git-fixes).\n- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ (git-fixes).\n- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ (git-fixes).\n- iio: imu: inv_icm42600: fix timestamp clock period by using lower value (git-fixes).\n- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading (git-fixes).\n- iio: imu: st_lsm6dsx: deselect shub page before reading whoami (git-fixes).\n- iio: light: al3010: fix incorrect scale for the highest gain range (git-fixes).\n- iio: light: gp2ap002: fix runtime PM leak on read error (git-fixes).\n- iio: light: tsl2591: return actual error from probe IRQ failure (git-fixes).\n- iio: magnetometer: ak8975: fix potential kernel stack memory leak (git-fixes).\n- iio: temperature: Build mlx90635 with CONFIG_MLX90635 (git-fixes).\n- Input: ads7846 - restore half-duplex support (git-fixes).\n- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).\n- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).\n- Input: goodix - clamp the device-reported contact count (git-fixes).\n- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).\n- Input: ims-pcu - add response length checks (git-fixes).\n- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).\n- Input: ims-pcu - fix firmware leak in async update (git-fixes).\n- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).\n- Input: ims-pcu - fix logic error in packet reset (git-fixes).\n- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).\n- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).\n- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).\n- Input: ims-pcu - only expose sysfs attributes on control interface (git-fixes).\n- Input: ims-pcu - release data interface on disconnect (git-fixes).\n- Input: ims-pcu - validate control endpoint type (git-fixes).\n- Input: maple_keyb - set driver data before registering input device (stable-fixes).\n- Input: maplecontrol - set driver data before registering input device (stable-fixes).\n- Input: maplemouse - fix NULL pointer dereference in open() (git-fixes).\n- Input: maplemouse - set driver data before registering input device (stable-fixes).\n- Input: mms114 - fix multi-touch slot corruption (git-fixes).\n- Input: mms114 - fix touch indexing for MMS134S and MMS136 (git-fixes).\n- Input: mms114 - reject an oversized device packet size (git-fixes).\n- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).\n- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).\n- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).\n- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).\n- Input: rmi4 - fix register descriptor address calculation (git-fixes).\n- Input: rmi4 - fix type overflow in register counts (git-fixes).\n- Input: rmi4 - initialize attn_fifo properly (stable-fixes).\n- Input: rmi4 - iterative IRQ handler (git-fixes).\n- Input: rmi4 - refactor F12 probe function (stable-fixes).\n- Input: rmi4 - refactor function allocation and registration (stable-fixes).\n- Input: rmi4 - refactor register descriptor parsing (git-fixes).\n- Input: rmi4 - tolerate short register descriptor structure (git-fixes).\n- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).\n- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (git-fixes).\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (git-fixes).\n- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).\n- Input: touchwin - reset the packet index on every complete packet (git-fixes).\n- intel_th: core: fix null pointer dereference in intel_th_irq (bsc#1248480).\n- intel_th: fix MSC output device reference leak (git-fixes).\n- io_uring/kbuf: don't truncate end buffer for bundles (bsc#1271290).\n- io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF (bsc#1261250).\n- io_uring/kbuf: flag partial buffer mappings (bsc#1271290).\n- io_uring/kbuf: propagate BUF_MORE through early buffer commit path (bsc#1261250).\n- io_uring/net: always use current transfer count for buffer put (git-fixes).\n- io_uring/net: improve recv bundles (bsc#1271290).\n- io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries (bsc#1271290).\n- io_uring/net: only consider msg_inq if larger than 1 (git-fixes).\n- io_uring/net: only retry recv bundle for a full transfer (bsc#1271290).\n- io_uring/timeout: add helper for parsing user time (bsc#1271291).\n- io_uring/timeout: honour caller's time namespace for IORING_TIMEOUT_ABS (bsc#1271291).\n- io_uring/timeout: migrate reqs from ts64 to ktime (bsc#1271291).\n- io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER (bsc#1271291).\n- ixgbe: reduce number of reads when getting OROM data (bsc#1269637).\n- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT (git-fixes).\n- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (git-fixes).\n- KVM: nSVM: Clear tracking of L1-\u003eL2 NMI and soft IRQ on nested #VMEXIT (git-fixes).\n- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).\n- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (git-fixes).\n- KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs (git-fixes).\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).\n- KVM: TDX: Reject concurrent change to CPUID entry count (git-fixes).\n- KVM: x86/mmu: Check write tracking in all address spaces (git-fixes).\n- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).\n- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).\n- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).\n- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN (git-fixes).\n- leds: uleds: Fix potential buffer overread (git-fixes).\n- mac802154: hold an interface reference across the scan worker (git-fixes).\n- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).\n- mac802154: Prevent overwrite return code in mac802154_perform_association() (git-fixes).\n- mac802154: remove interfaces with RCU list deletion (git-fixes).\n- mailbox: zynqmp: setup IPI for each valid child node (bsc#1271395).\n- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (bsc#1266694).\n- media: aspeed: fix missing of_reserved_mem_device_release() on probe failure (git-fixes).\n- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).\n- media: atomisp: gc2235: fix UAF and memory leak (git-fixes).\n- media: cec: seco: unregister adapter on IR probe failure (git-fixes).\n- media: cedrus: Fix failure to clean up hardware on probe failure (git-fixes).\n- media: cedrus: Fix missing cleanup in error path (git-fixes).\n- media: cedrus: skip invalid H.264 reference list entries (git-fixes).\n- media: marvell-cam: fix missing pci_disable_device() on remove (git-fixes).\n- media: mtk-jpeg: cancel workqueue on release for supported platforms only (git-fixes).\n- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).\n- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).\n- media: pci: dm1105: Free allocated workqueue (git-fixes).\n- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite (git-fixes).\n- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).\n- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).\n- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).\n- media: rockchip: rga: fix too small buffer size (git-fixes).\n- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).\n- media: ti: vpe: unwind v4l2 device registration on probe error (git-fixes).\n- media: uvcvideo: Avoid partial metadata buffers (git-fixes).\n- media: uvcvideo: Do not add clock samples with small sof delta (git-fixes).\n- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).\n- media: uvcvideo: Fix dev_sof filtering in hw timestamp (git-fixes).\n- media: uvcvideo: Fix sequence number when no EOF (git-fixes).\n- media: uvcvideo: Relax the constrains for interpolating the hw clock (git-fixes).\n- media: uvcvideo: Use hw timestaming if the clock buffer is full (git-fixes).\n- media: v4l2-common: Add YUV24 format info (git-fixes).\n- media: v4l2-ctrls: validate HEVC active reference counts (git-fixes).\n- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (git-fixes).\n- media: vidtv: fix reference leak on failed device registration (git-fixes).\n- media: vimc: fix reference leak on failed device registration (git-fixes).\n- media: vpif_capture: fix OF node reference imbalance (git-fixes).\n- mei: bus: access mei_device under device_lock on cleanup (git-fixes).\n- memory: tegra: Wire up system sleep PM ops (git-fixes).\n- memstick: ms_block: reject a card that reports too many blocks (git-fixes).\n- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).\n- mfd: cs42l43: Sanity check firmware size (git-fixes).\n- mfd: rsmu: Fix page register setup (git-fixes).\n- mfd: sm501: Fix reference leak on failed device registration (git-fixes).\n- mfd: tps6586x: Fix OF node refcount (git-fixes).\n- misc: nsm: only unlock nsm_dev on post-lock error paths (git-fixes).\n- misc: nsm: pin the module while the device is open (git-fixes).\n- mkspec-dtb: Skip missing DTBs.\n- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).\n- mmc: block: fix RPMB device unregister ordering (git-fixes).\n- mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method (git-fixes).\n- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).\n- mshv: fix hv_input_get_system_property struct (git-fixes).\n- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).\n- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).\n- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).\n- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).\n- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).\n- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).\n- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).\n- net: mana: Add Interrupt Moderation support (bsc#1271368).\n- net: mana: Return error code from mana_create_rxq() (git-fixes).\n- net: mctp i2c: Copy headers if cloned (bsc#1266694).\n- net: mctp-i2c: fix duplicate reception of old data (bsc#1266694).\n- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).\n- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).\n- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).\n- net: wwan: t7xx: check skb_clone in control TX (git-fixes).\n- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).\n- netfs: Defer the emission of trace_netfs_folio() (git-fixes).\n- of: cpu: add check in __of_find_n_match_cpu_property() (git-fixes).\n- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (git-fixes).\n- phy: phy-can-transceiver: Check driver match and driver data against NULL (git-fixes).\n- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).\n- phy: zynqmp: fix runtime PM leak on probe allocation failure (git-fixes).\n- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).\n- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).\n- pinctrl-amd: Don't clear S4 wake bits at probe (git-fixes).\n- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).\n- pinctrl: cs42l43: Fix polarity on debounce (git-fixes).\n- pinctrl: devicetree: don't free uninitialized dev_name on error path (git-fixes).\n- pinctrl: equilibrium: fix warning trace on load (git-fixes).\n- pinctrl: equilibrium: rename irq_chip function callbacks (stable-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: meson: restore non-sleeping GPIO access (git-fixes).\n- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table (git-fixes).\n- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).\n- pinctrl: qcom: Unconditionally mark gpio as wakeup enable (git-fixes).\n- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path (git-fixes).\n- pkspec-dtb: Fix dtb-al rename.\n- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).\n- platform/x86/amd/pmc: Avoid logging \"(null)\" for DMI values (git-fixes).\n- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).\n- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).\n- platform/x86/amd/pmc: Don't log during intermediate wakeups (stable-fixes).\n- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (git-fixes).\n- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).\n- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).\n- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912).\n- posix-timers: Add proper state tracking (bsc#1271912).\n- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).\n- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).\n- power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() (git-fixes).\n- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).\n- power: supply: max17040: handle missing status supplier (git-fixes).\n- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).\n- regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (git-fixes).\n- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).\n- regulator: mt6358: use regmap helper to read fixed LDO calibration (git-fixes).\n- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).\n- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).\n- Revert \"Input: rmi4 - fix register descriptor address calculation\" (stable-fixes).\n- sctp: validate embedded address parameter length (git-fixes).\n- security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() (git-fixes).\n- selftests: Disable dad for ipv6 in fcnal-test.sh (bsc#1272871).\n- selftests: Replace sleep with slowwait (bsc#1272871).\n- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).\n- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).\n- serial: 8250_omap: clear rx_running on zero-length DMA completes (git-fixes).\n- serial: msm: Disable DMA for kernel console UART (git-fixes).\n- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).\n- soc: fsl: qe: panic on ioremap() failure in qe_reset() (git-fixes).\n- soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy (git-fixes).\n- soc: xilinx: Shutdown and free rx mailbox channel (git-fixes).\n- spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure (git-fixes).\n- spi: sh-msiof: abort transfers when reset times out (git-fixes).\n- staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() (git-fixes).\n- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).\n- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).\n- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).\n- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB write in HT_caps_handler() (git-fixes).\n- staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (git-fixes).\n- thermal: core: Free thermal zone ID later during removal (git-fixes).\n- time: Switch to hrtimer_setup() (bsc#1271912).\n- tpm: Make the TPM character devices non-seekable (git-fixes).\n- uio_hv_generic: Bind to FCopy device by default (git-fixes).\n- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).\n- usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() (git-fixes).\n- USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (git-fixes).\n- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).\n- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).\n- usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() (git-fixes).\n- usb: dwc3: run gadget disconnect from sleepable suspend context (git-fixes).\n- usb: free iso schedules on failed submit (git-fixes).\n- usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (git-fixes).\n- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).\n- usb: gadget: f_fs: Fix DMA fence leak (git-fixes).\n- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).\n- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).\n- usb: gadget: f_printer: take kref only for successful open (git-fixes).\n- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: function: rndis: add length check for header (stable-fixes).\n- usb: gadget: function: rndis: add length check to response query (stable-fixes).\n- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).\n- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).\n- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).\n- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).\n- USB: idmouse: fix use-after-free on disconnect race (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).\n- usb: iowarrior: remove inherent race with minor number (stable-fixes).\n- USB: ldusb: fix use-after-free on disconnect race (git-fixes).\n- USB: legousbtower: fix use-after-free on disconnect race (git-fixes).\n- USB: misc: uss720: unregister parport on probe failure (git-fixes).\n- usb: mtu3: unmap request DMA on queue failure (git-fixes).\n- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).\n- USB: serial: digi_acceleport: fix broken rx after throttle (git-fixes).\n- USB: serial: digi_acceleport: fix hard lockup on disconnect (git-fixes).\n- USB: serial: digi_acceleport: fix write buffer corruption (git-fixes).\n- USB: serial: io_edgeport: cap received transmit credits (git-fixes).\n- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).\n- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).\n- USB: serial: keyspan_pda: fix information leak (git-fixes).\n- USB: serial: mxuport: validate firmware header size (git-fixes).\n- USB: serial: option: add MeiG SRM813Q (stable-fixes).\n- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).\n- usb: sl811-hcd: disable controller wakeup on remove (git-fixes).\n- USB: storage: include US_FL_NO_SAME in quirks mask (git-fixes).\n- usb: typec: anx7411: use devm_pm_runtime_enable() (git-fixes).\n- usb: typec: class: drop PD lookup reference (git-fixes).\n- usb: typec: tcpm: Fix VDM type for Enter Mode commands (git-fixes).\n- usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (git-fixes).\n- usb: typec: ucsi: cancel pending work on system suspend (git-fixes).\n- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove (git-fixes).\n- usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware (git-fixes).\n- usb: typec: ucsi: Invert DisplayPort role assignment (git-fixes).\n- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode (git-fixes).\n- USB: ulpi: fix memory leak on registration failure (git-fixes).\n- USB: usb-storage: ene_ub6250: restore media-ready check (git-fixes).\n- usb: xhci: Fix sleep in atomic context in xhci_free_streams() (git-fixes).\n- usbip: tools: support SuperSpeedPlus devices (git-fixes).\n- usbip: vudc: fix NULL deref in vep_dequeue() (git-fixes).\n- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).\n- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).\n- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).\n- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).\n- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (git-fixes).\n- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).\n- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).\n- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).\n- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).\n- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).\n- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).\n- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).\n- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).\n- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).\n- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).\n- wifi: mac80211: tear down new links on vif update error path (git-fixes).\n- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).\n- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).\n- wifi: mt76: Disable napi when removing device (git-fixes).\n- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).\n- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: fix crash in reset link replay (git-fixes).\n- wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() (git-fixes).\n- wifi: mt76: mt7925: guard link STA in decap offload (git-fixes).\n- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).\n- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).\n- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).\n- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).\n- wifi: mwifiex: fix roaming to different channel in host_mlme mode (git-fixes).\n- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).\n- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).\n- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).\n- xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).\n- xfs: only assert new size for datafork during truncate extents (bsc#1264084).\n- xfs: rearrange code in xfs_inode_item_precommit (bsc#1237449).\n- xfs: rework datasync tracking and execution (bsc#1237449).\n- xhci: dbgtty: fix device unregister (git-fixes).\n- xhci: dbgtty: fix device unregister: fixup (git-fixes).\n","status":"published","published":"2026-08-11T20:56:24Z","modified":"2026-08-15T18:23:51.257464779Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23068-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).\n- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).\n- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).\n- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).\n- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).\n- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).\n- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).\n- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).\n- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).\n- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).\n- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).\n- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).\n- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).\n- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).\n- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).\n- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).\n- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).\n- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).\n- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).\n- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).\n- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).\n- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).\n- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).\n- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).\n- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).\n- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).\n- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).\n- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).\n- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).\n- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).\n- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).\n- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).\n- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).\n- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).\n- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).\n- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).\n- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).\n- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).\n- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).\n- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).\n- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).\n- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).\n- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).\n- CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).\n- CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).\n- CVE-2026-46036: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470).\n- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).\n- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).\n- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).\n- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).\n- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).\n- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).\n- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).\n- CVE-2026-46121: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (bsc#1266932).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46130: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629).\n- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).\n- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).\n- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).\n- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).\n- CVE-2026-46170: mptcp: disable add_addr retransmission when timeout is 0 (bsc#1267714).\n- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).\n- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).\n- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).\n- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).\n- CVE-2026-46216: drm/xe/hdcp: Add NULL check for media_gt in (bsc#1267234).\n- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).\n- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).\n- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).\n- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).\n- CVE-2026-46287: net: txgbe: fix RTNL assertion warning when remove module (bsc#1267954).\n- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).\n- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).\n- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).\n- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).\n- CVE-2026-46327: dm: fix unlocked test for dm_suspended_md (bsc#1268031).\n- CVE-2026-46329: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038).\n- CVE-2026-52913: batman-adv: v: stop OGMv2 on disabled interface (bsc#1268985).\n- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).\n- CVE-2026-52916: batman-adv: frag: disallow unicast fragment in fragment (bsc#1269002).\n- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).\n- CVE-2026-52922: batman-adv: dat: handle forward allocation error (bsc#1269030).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52926: batman-adv: clear current gateway during teardown (bsc#1269025).\n- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).\n- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).\n- CVE-2026-52934: batman-adv: tvlv: reject oversized TVLV packets (bsc#1268994).\n- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).\n- CVE-2026-52941: net/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint (bsc#1268966).\n- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).\n- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).\n- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).\n- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).\n- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).\n- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).\n- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).\n- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).\n- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).\n- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).\n- CVE-2026-52988: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (bsc#1269362).\n- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).\n- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).\n- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).\n- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).\n- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).\n- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).\n- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).\n- CVE-2026-53005: af_unix: Drop all SCM attributes for SOCKMAP (bsc#1269107).\n- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).\n- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).\n- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).\n- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).\n- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).\n- CVE-2026-53014: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir\n  (bsc#1269092).\n- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).\n- CVE-2026-53035: bpf, sockmap: Fix af_unix iter deadlock (bsc#1269190).\n- CVE-2026-53038: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).\n- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).\n- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).\n- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).\n- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).\n- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).\n- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).\n- CVE-2026-53085: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).\n- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).\n- CVE-2026-53101: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (bsc#1269415).\n- CVE-2026-53104: wifi: mt76: Fix memory leak destroying device (bsc#1269157).\n- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).\n- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).\n- CVE-2026-53121: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (bsc#1269198).\n- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).\n- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).\n- CVE-2026-53157: net: phonet: free phonet_device after RCU grace period (bsc#1269241).\n- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).\n- CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).\n- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).\n- CVE-2026-53184: udp: clear skb-\u003edev before running a sockmap verdict (bsc#1269689).\n- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).\n- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).\n- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).\n- CVE-2026-53210: tee: shm: fix shm leak in register_shm_helper() (bsc#1269727).\n- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).\n- CVE-2026-53214: ipv6: Fix a potential NPD in cleanup_prefix_route() (bsc#1269588).\n- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).\n- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).\n- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).\n- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).\n- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269801).\n- CVE-2026-53235: net: add pskb_may_pull() to skb_gro_receive_list() (bsc#1269286).\n- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).\n- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).\n- CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (bsc#1269235).\n- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).\n- CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev() (bsc#1269307).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).\n- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).\n- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).\n- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).\n- CVE-2026-53321: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).\n- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).\n- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).\n- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).\n- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).\n- CVE-2026-53393: nfsd: reset write verifier on deferred writeback errors (bsc#1271858).\n- CVE-2026-53394: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race (bsc#1271859).\n- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).\n- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).\n- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).\n- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).\n- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).\n- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).\n- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).\n- CVE-2026-63831: mac802154: llsec: add skb_cow_data() before in-place crypto (bsc#1272184).\n- CVE-2026-63836: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (bsc#1272246).\n- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).\n- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).\n- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).\n- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).\n- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).\n- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).\n- CVE-2026-64061: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).\n- CVE-2026-64091: batman-adv: tt: fix TOCTOU race for reported vlans (bsc#1272514).\n- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).\n- CVE-2026-64157: netfs: Fix partial invalidation of streaming-write folio (bsc#1272462).\n- CVE-2026-64158: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).\n- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).\n- CVE-2026-64357: xfs: fix exchmaps reservation limit check (bsc#1272612).\n- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).\n- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).\n- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Fix wrong register read in LNL failure diagnostics (git-fixes).\n- accel/ivpu: Reject firmware log with size smaller than header (git-fixes).\n- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).\n- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).\n- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).\n- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).\n- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).\n- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).\n- ALSA: scarlett2: Allow selecting config_set by firmware version (stable-fixes).\n- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (git-fixes).\n- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).\n- ALSA: seq: Fix division by zero in initialize_timer() (git-fixes).\n- ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (git-fixes).\n- ALSA: timer: don't re-enter an instance callback that is still running (git-fixes).\n- ALSA: timer: drain a slave's callback before its master detaches it (git-fixes).\n- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).\n- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).\n- ALSA: usb-audio: fix stack info leak in RME Digiface status (git-fixes).\n- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).\n- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).\n- apparmor: fix use-after-free in rawdata dedup loop (git-fixes).\n- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (git-fixes).\n- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).\n- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).\n- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).\n- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).\n- ASoC: cs42l43: Correct report for forced microphone jack (git-fixes).\n- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP (git-fixes).\n- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).\n- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).\n- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup (git-fixes).\n- ASoC: tas2562: fix DVC coefficient write order (git-fixes).\n- ASoC: tas2781: bound firmware description string parsing (git-fixes).\n- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).\n- batman-adv: bla: reacquire gw address after skb realloc (git-fixes).\n- batman-adv: dat: ensure accessible eth_hdr proto field (git-fixes).\n- batman-adv: dat: fix tie-break for candidate selection (git-fixes).\n- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).\n- batman-adv: fix VLAN priority offset (git-fixes).\n- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).\n- batman-adv: frag: free unfragmentable packet (git-fixes).\n- batman-adv: mcast: avoid OOB read of num_dests header (git-fixes).\n- batman-adv: tt: avoid request storms during pending request (git-fixes).\n- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).\n- bitops: use common function parameter names (git-fixes).\n- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).\n- Bluetooth: 6lowpan: Fix using chan-\u003econn as indication to no remote netdev (git-fixes).\n- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).\n- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).\n- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).\n- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).\n- Bluetooth: hci_qca: Clear memdump state on invalid dump size (git-fixes).\n- Bluetooth: hci_sync: Fix advertising data UAFs (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback (git-fixes).\n- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).\n- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).\n- Bluetooth: HIDP: validate numbered report payloads (git-fixes).\n- Bluetooth: ISO: clear iso_data always when detaching conn from hcon (git-fixes).\n- Bluetooth: ISO: fix CONNECTED -\u003e CLOSED transition on shutdown/release (git-fixes).\n- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).\n- Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() (git-fixes).\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).\n- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).\n- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).\n- Bluetooth: SCO: give the socket its own sco_conn reference (git-fixes).\n- btrfs: do not trim a device which is not writeable (bsc#1272568).\n- bus: sunxi-rsb: Always check register address validity (git-fixes).\n- can: bcm: add missing rcu list annotations and operations (git-fixes).\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).\n- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).\n- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).\n- can: ctucanfd: handle bus error interrupts (git-fixes).\n- can: ctucanfd: mark error-active controller status valid (git-fixes).\n- can: ctucanfd: unmap BAR0 using base address (git-fixes).\n- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).\n- can: ems_usb: validate CPC message lengths (git-fixes).\n- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).\n- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure (git-fixes).\n- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).\n- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).\n- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).\n- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).\n- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).\n- can: peak_usb: add bounds check for USB channel index (git-fixes).\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).\n- can: peak_usb: validate uCAN receive record lengths (git-fixes).\n- can: softing: fw_parse(): validate firmware record spans (git-fixes).\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).\n- comedi: comedi_parport: deal with premature interrupt (git-fixes).\n- crypto/xxhash: set downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: introduce downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: qat - keep VFs enabled during reset (stable-fixes).\n- crypto: qat - notify fatal error before AER reset preparation (stable-fixes).\n- dm cache policy smq: check allocation under invalidate lock (git-fixes).\n- dm cache: fix missing return in invalidate_committed's error path (git-fixes).\n- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).\n- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).\n- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).\n- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).\n- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).\n- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).\n- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).\n- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).\n- drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference (git-fixes).\n- drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips (git-fixes).\n- drm/amd/display: set new_stream to NULL after release (git-fixes).\n- drm/amd/display: use proper context for logging (git-fixes).\n- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).\n- drm/amd/pm: fix amdgpu_pm_info power display units (git-fixes).\n- drm/amd/pm: fix smu13 power limit range calculation (git-fixes).\n- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge (git-fixes).\n- drm/amdgpu: fix aperture mapping leak (git-fixes).\n- drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment (git-fixes).\n- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).\n- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).\n- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).\n- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() (git-fixes).\n- drm/gfx10: Program DB_RING_CONTROL (git-fixes).\n- drm/i915/bios: range check LFP Data Block panel_type2 (git-fixes).\n- drm/i915/gem: Do not leak siblings[] on proto context error (git-fixes).\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU (git-fixes).\n- drm/i915/gt: use correct selftest config symbol (git-fixes).\n- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).\n- drm/i915: ensure segment offset never exceeds allowed max (stable-fixes).\n- drm/i915: Return NULL on error in active_instance (git-fixes).\n- drm/imagination: acquire vm_ctx-\u003elock before mapping memory to GPU VM (git-fixes).\n- drm/imagination: Fix double call to drm_sched_entity_fini() (git-fixes).\n- drm/imagination: fix error checking of pvr_vm_context_lookup() (git-fixes).\n- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY (git-fixes).\n- drm/imagination: Fix user array stride in pvr_set_uobj_array() (git-fixes).\n- drm/mediatek: Check CRTC state before freeing (git-fixes).\n- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).\n- drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() (git-fixes).\n- drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced (git-fixes).\n- drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() (git-fixes).\n- drm/panthor: Interrupt group start/resumption if group_bind_locked() fails (git-fixes).\n- drm/panthor: reject firmware sections with oversized data (git-fixes).\n- drm/panthor: return error on truncated firmware (git-fixes).\n- drm/panthor: validate firmware interface structure sizes (git-fixes).\n- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).\n- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).\n- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem (git-fixes).\n- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup (git-fixes).\n- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).\n- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).\n- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).\n- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).\n- drm/virtio: bound EDID block reads to the response buffer (git-fixes).\n- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).\n- drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure (git-fixes).\n- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).\n- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).\n- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).\n- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).\n- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).\n- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).\n- drm/xe/hw_engine: Fix double-free of managed BO in error path (git-fixes).\n- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays (git-fixes).\n- drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() (git-fixes).\n- drm/xe/wopcm: fix WOPCM size for LNL+ (git-fixes).\n- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds (git-fixes).\n- drm/xe: remove duplicate \u003ckunit/test-bug.h\u003e include (git-fixes).\n- erofs: set fileio bio failed in short read case (git-fixes).\n- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).\n- fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() (git-fixes).\n- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).\n- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).\n- fbdev: hecubafb: fix potential memory leak in hecubafb_probe() (git-fixes).\n- fbdev: i740fb: fix potential memory leak in i740fb_probe() (git-fixes).\n- fbdev: metronomefb: fix potential memory leak in metronomefb_probe() (git-fixes).\n- fbdev: nvidia: fix potential memory leak in nvidiafb_probe() (git-fixes).\n- fbdev: radeon: fix potential memory leak in radeonfb_pci_register() (git-fixes).\n- fbdev: s3fb: fix potential memory leak in s3_pci_probe() (git-fixes).\n- fbdev: sm501fb: Fix buffer errors in OF binding code (git-fixes).\n- fbdev: sm712: Fix operator precedence in big_swap macro (git-fixes).\n- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() (git-fixes).\n- fbdev: tridentfb: fix potential memory leak in trident_pci_probe() (git-fixes).\n- fbdev: uvesafb: fix potential memory leak in uvesafb_probe() (git-fixes).\n- fbdev: vesafb: fix memory leak in vesafb_probe() (git-fixes).\n- firewire: net: Fix fragmented datagram reassembly (git-fixes).\n- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).\n- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (git-fixes).\n- gpio-f7188x: Add support for NCT6126D version B (git-fixes).\n- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure (git-fixes).\n- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).\n- gpio: htc-egpio: use managed gpiochip registration (git-fixes).\n- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: free generic chips on unbind (git-fixes).\n- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).\n- gpio: rockchip: change the GPIO version judgment logic (stable-fixes).\n- gpio: rockchip: fix generic IRQ chip leak on remove (git-fixes).\n- gpio: rockchip: teardown bugs and resource leaks (git-fixes).\n- gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() (git-fixes).\n- gpio: tegra: do not call pinctrl for GPIO direction (git-fixes).\n- gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- gpios: palmas: add .get_direction() op (git-fixes).\n- HID: add haptics page defines (stable-fixes).\n- HID: hid-sjoy: race between init and usage (git-fixes).\n- HID: pidff: Add missing spaces (stable-fixes).\n- HID: pidff: Fix missing blank lines after declarations (stable-fixes).\n- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).\n- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).\n- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).\n- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).\n- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).\n- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).\n- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).\n- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).\n- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).\n- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).\n- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).\n- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).\n- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).\n- hwmon: (ltc4282) Fix reading the minimum alarm voltage (git-fixes).\n- hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (git-fixes).\n- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).\n- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).\n- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (nzxt-smart2) DMA-align output buffer (git-fixes).\n- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).\n- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).\n- hwmon: (sht3x) Fix unaligned accesses (git-fixes).\n- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).\n- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).\n- hwmon: occ: validate poll response sensor blocks (git-fixes).\n- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).\n- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).\n- i2c: imx: Fix slave registration race and error handling (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).\n- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).\n- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).\n- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).\n- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).\n- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).\n- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).\n- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).\n- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).\n- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).\n- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).\n- iio: accel: bmc150: clamp the device-reported FIFO frame count (git-fixes).\n- iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (git-fixes).\n- iio: adc: lpc32xx: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: spear: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: ti-ads124s08: Return reset GPIO lookup errors (git-fixes).\n- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable (git-fixes).\n- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).\n- iio: event: Fix event FIFO reset race (git-fixes).\n- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ (git-fixes).\n- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ (git-fixes).\n- iio: imu: inv_icm42600: fix timestamp clock period by using lower value (git-fixes).\n- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading (git-fixes).\n- iio: imu: st_lsm6dsx: deselect shub page before reading whoami (git-fixes).\n- iio: light: al3010: fix incorrect scale for the highest gain range (git-fixes).\n- iio: light: gp2ap002: fix runtime PM leak on read error (git-fixes).\n- iio: light: tsl2591: return actual error from probe IRQ failure (git-fixes).\n- iio: magnetometer: ak8975: fix potential kernel stack memory leak (git-fixes).\n- iio: temperature: Build mlx90635 with CONFIG_MLX90635 (git-fixes).\n- Input: ads7846 - restore half-duplex support (git-fixes).\n- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).\n- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).\n- Input: goodix - clamp the device-reported contact count (git-fixes).\n- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).\n- Input: ims-pcu - add response length checks (git-fixes).\n- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).\n- Input: ims-pcu - fix firmware leak in async update (git-fixes).\n- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).\n- Input: ims-pcu - fix logic error in packet reset (git-fixes).\n- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).\n- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).\n- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).\n- Input: ims-pcu - only expose sysfs attributes on control interface (git-fixes).\n- Input: ims-pcu - release data interface on disconnect (git-fixes).\n- Input: ims-pcu - validate control endpoint type (git-fixes).\n- Input: maple_keyb - set driver data before registering input device (stable-fixes).\n- Input: maplecontrol - set driver data before registering input device (stable-fixes).\n- Input: maplemouse - fix NULL pointer dereference in open() (git-fixes).\n- Input: maplemouse - set driver data before registering input device (stable-fixes).\n- Input: mms114 - fix multi-touch slot corruption (git-fixes).\n- Input: mms114 - fix touch indexing for MMS134S and MMS136 (git-fixes).\n- Input: mms114 - reject an oversized device packet size (git-fixes).\n- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).\n- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).\n- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).\n- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).\n- Input: rmi4 - fix register descriptor address calculation (git-fixes).\n- Input: rmi4 - fix type overflow in register counts (git-fixes).\n- Input: rmi4 - initialize attn_fifo properly (stable-fixes).\n- Input: rmi4 - iterative IRQ handler (git-fixes).\n- Input: rmi4 - refactor F12 probe function (stable-fixes).\n- Input: rmi4 - refactor function allocation and registration (stable-fixes).\n- Input: rmi4 - refactor register descriptor parsing (git-fixes).\n- Input: rmi4 - tolerate short register descriptor structure (git-fixes).\n- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).\n- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (git-fixes).\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (git-fixes).\n- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).\n- Input: touchwin - reset the packet index on every complete packet (git-fixes).\n- intel_th: core: fix null pointer dereference in intel_th_irq (bsc#1248480).\n- intel_th: fix MSC output device reference leak (git-fixes).\n- io_uring/kbuf: don't truncate end buffer for bundles (bsc#1271290).\n- io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF (bsc#1261250).\n- io_uring/kbuf: flag partial buffer mappings (bsc#1271290).\n- io_uring/kbuf: propagate BUF_MORE through early buffer commit path (bsc#1261250).\n- io_uring/net: always use current transfer count for buffer put (git-fixes).\n- io_uring/net: improve recv bundles (bsc#1271290).\n- io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries (bsc#1271290).\n- io_uring/net: only consider msg_inq if larger than 1 (git-fixes).\n- io_uring/net: only retry recv bundle for a full transfer (bsc#1271290).\n- io_uring/timeout: add helper for parsing user time (bsc#1271291).\n- io_uring/timeout: honour caller's time namespace for IORING_TIMEOUT_ABS (bsc#1271291).\n- io_uring/timeout: migrate reqs from ts64 to ktime (bsc#1271291).\n- io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER (bsc#1271291).\n- ixgbe: reduce number of reads when getting OROM data (bsc#1269637).\n- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT (git-fixes).\n- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (git-fixes).\n- KVM: nSVM: Clear tracking of L1-\u003eL2 NMI and soft IRQ on nested #VMEXIT (git-fixes).\n- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).\n- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (git-fixes).\n- KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs (git-fixes).\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).\n- KVM: TDX: Reject concurrent change to CPUID entry count (git-fixes).\n- KVM: x86/mmu: Check write tracking in all address spaces (git-fixes).\n- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).\n- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).\n- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).\n- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN (git-fixes).\n- leds: uleds: Fix potential buffer overread (git-fixes).\n- mac802154: hold an interface reference across the scan worker (git-fixes).\n- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).\n- mac802154: Prevent overwrite return code in mac802154_perform_association() (git-fixes).\n- mac802154: remove interfaces with RCU list deletion (git-fixes).\n- mailbox: zynqmp: setup IPI for each valid child node (bsc#1271395).\n- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (bsc#1266694).\n- media: aspeed: fix missing of_reserved_mem_device_release() on probe failure (git-fixes).\n- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).\n- media: atomisp: gc2235: fix UAF and memory leak (git-fixes).\n- media: cec: seco: unregister adapter on IR probe failure (git-fixes).\n- media: cedrus: Fix failure to clean up hardware on probe failure (git-fixes).\n- media: cedrus: Fix missing cleanup in error path (git-fixes).\n- media: cedrus: skip invalid H.264 reference list entries (git-fixes).\n- media: marvell-cam: fix missing pci_disable_device() on remove (git-fixes).\n- media: mtk-jpeg: cancel workqueue on release for supported platforms only (git-fixes).\n- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).\n- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).\n- media: pci: dm1105: Free allocated workqueue (git-fixes).\n- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite (git-fixes).\n- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).\n- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).\n- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).\n- media: rockchip: rga: fix too small buffer size (git-fixes).\n- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).\n- media: ti: vpe: unwind v4l2 device registration on probe error (git-fixes).\n- media: uvcvideo: Avoid partial metadata buffers (git-fixes).\n- media: uvcvideo: Do not add clock samples with small sof delta (git-fixes).\n- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).\n- media: uvcvideo: Fix dev_sof filtering in hw timestamp (git-fixes).\n- media: uvcvideo: Fix sequence number when no EOF (git-fixes).\n- media: uvcvideo: Relax the constrains for interpolating the hw clock (git-fixes).\n- media: uvcvideo: Use hw timestaming if the clock buffer is full (git-fixes).\n- media: v4l2-common: Add YUV24 format info (git-fixes).\n- media: v4l2-ctrls: validate HEVC active reference counts (git-fixes).\n- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (git-fixes).\n- media: vidtv: fix reference leak on failed device registration (git-fixes).\n- media: vimc: fix reference leak on failed device registration (git-fixes).\n- media: vpif_capture: fix OF node reference imbalance (git-fixes).\n- mei: bus: access mei_device under device_lock on cleanup (git-fixes).\n- memory: tegra: Wire up system sleep PM ops (git-fixes).\n- memstick: ms_block: reject a card that reports too many blocks (git-fixes).\n- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).\n- mfd: cs42l43: Sanity check firmware size (git-fixes).\n- mfd: rsmu: Fix page register setup (git-fixes).\n- mfd: sm501: Fix reference leak on failed device registration (git-fixes).\n- mfd: tps6586x: Fix OF node refcount (git-fixes).\n- misc: nsm: only unlock nsm_dev on post-lock error paths (git-fixes).\n- misc: nsm: pin the module while the device is open (git-fixes).\n- mkspec-dtb: Skip missing DTBs.\n- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).\n- mmc: block: fix RPMB device unregister ordering (git-fixes).\n- mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method (git-fixes).\n- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).\n- mshv: fix hv_input_get_system_property struct (git-fixes).\n- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).\n- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).\n- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).\n- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).\n- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).\n- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).\n- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).\n- net: mana: Add Interrupt Moderation support (bsc#1271368).\n- net: mana: Return error code from mana_create_rxq() (git-fixes).\n- net: mctp i2c: Copy headers if cloned (bsc#1266694).\n- net: mctp-i2c: fix duplicate reception of old data (bsc#1266694).\n- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).\n- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).\n- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).\n- net: wwan: t7xx: check skb_clone in control TX (git-fixes).\n- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).\n- netfs: Defer the emission of trace_netfs_folio() (git-fixes).\n- of: cpu: add check in __of_find_n_match_cpu_property() (git-fixes).\n- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (git-fixes).\n- phy: phy-can-transceiver: Check driver match and driver data against NULL (git-fixes).\n- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).\n- phy: zynqmp: fix runtime PM leak on probe allocation failure (git-fixes).\n- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).\n- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).\n- pinctrl-amd: Don't clear S4 wake bits at probe (git-fixes).\n- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).\n- pinctrl: cs42l43: Fix polarity on debounce (git-fixes).\n- pinctrl: devicetree: don't free uninitialized dev_name on error path (git-fixes).\n- pinctrl: equilibrium: fix warning trace on load (git-fixes).\n- pinctrl: equilibrium: rename irq_chip function callbacks (stable-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: meson: restore non-sleeping GPIO access (git-fixes).\n- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table (git-fixes).\n- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).\n- pinctrl: qcom: Unconditionally mark gpio as wakeup enable (git-fixes).\n- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path (git-fixes).\n- pkspec-dtb: Fix dtb-al rename.\n- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).\n- platform/x86/amd/pmc: Avoid logging \"(null)\" for DMI values (git-fixes).\n- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).\n- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).\n- platform/x86/amd/pmc: Don't log during intermediate wakeups (stable-fixes).\n- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (git-fixes).\n- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).\n- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).\n- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912).\n- posix-timers: Add proper state tracking (bsc#1271912).\n- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).\n- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).\n- power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() (git-fixes).\n- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).\n- power: supply: max17040: handle missing status supplier (git-fixes).\n- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).\n- regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (git-fixes).\n- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).\n- regulator: mt6358: use regmap helper to read fixed LDO calibration (git-fixes).\n- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).\n- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).\n- Revert \"Input: rmi4 - fix register descriptor address calculation\" (stable-fixes).\n- sctp: validate embedded address parameter length (git-fixes).\n- security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() (git-fixes).\n- selftests: Disable dad for ipv6 in fcnal-test.sh (bsc#1272871).\n- selftests: Replace sleep with slowwait (bsc#1272871).\n- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).\n- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).\n- serial: 8250_omap: clear rx_running on zero-length DMA completes (git-fixes).\n- serial: msm: Disable DMA for kernel console UART (git-fixes).\n- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).\n- soc: fsl: qe: panic on ioremap() failure in qe_reset() (git-fixes).\n- soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy (git-fixes).\n- soc: xilinx: Shutdown and free rx mailbox channel (git-fixes).\n- spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure (git-fixes).\n- spi: sh-msiof: abort transfers when reset times out (git-fixes).\n- staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() (git-fixes).\n- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).\n- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).\n- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).\n- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB write in HT_caps_handler() (git-fixes).\n- staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (git-fixes).\n- thermal: core: Free thermal zone ID later during removal (git-fixes).\n- time: Switch to hrtimer_setup() (bsc#1271912).\n- tpm: Make the TPM character devices non-seekable (git-fixes).\n- uio_hv_generic: Bind to FCopy device by default (git-fixes).\n- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).\n- usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() (git-fixes).\n- USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (git-fixes).\n- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).\n- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).\n- usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() (git-fixes).\n- usb: dwc3: run gadget disconnect from sleepable suspend context (git-fixes).\n- usb: free iso schedules on failed submit (git-fixes).\n- usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (git-fixes).\n- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).\n- usb: gadget: f_fs: Fix DMA fence leak (git-fixes).\n- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).\n- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).\n- usb: gadget: f_printer: take kref only for successful open (git-fixes).\n- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: function: rndis: add length check for header (stable-fixes).\n- usb: gadget: function: rndis: add length check to response query (stable-fixes).\n- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).\n- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).\n- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).\n- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).\n- USB: idmouse: fix use-after-free on disconnect race (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).\n- usb: iowarrior: remove inherent race with minor number (stable-fixes).\n- USB: ldusb: fix use-after-free on disconnect race (git-fixes).\n- USB: legousbtower: fix use-after-free on disconnect race (git-fixes).\n- USB: misc: uss720: unregister parport on probe failure (git-fixes).\n- usb: mtu3: unmap request DMA on queue failure (git-fixes).\n- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).\n- USB: serial: digi_acceleport: fix broken rx after throttle (git-fixes).\n- USB: serial: digi_acceleport: fix hard lockup on disconnect (git-fixes).\n- USB: serial: digi_acceleport: fix write buffer corruption (git-fixes).\n- USB: serial: io_edgeport: cap received transmit credits (git-fixes).\n- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).\n- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).\n- USB: serial: keyspan_pda: fix information leak (git-fixes).\n- USB: serial: mxuport: validate firmware header size (git-fixes).\n- USB: serial: option: add MeiG SRM813Q (stable-fixes).\n- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).\n- usb: sl811-hcd: disable controller wakeup on remove (git-fixes).\n- USB: storage: include US_FL_NO_SAME in quirks mask (git-fixes).\n- usb: typec: anx7411: use devm_pm_runtime_enable() (git-fixes).\n- usb: typec: class: drop PD lookup reference (git-fixes).\n- usb: typec: tcpm: Fix VDM type for Enter Mode commands (git-fixes).\n- usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (git-fixes).\n- usb: typec: ucsi: cancel pending work on system suspend (git-fixes).\n- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove (git-fixes).\n- usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware (git-fixes).\n- usb: typec: ucsi: Invert DisplayPort role assignment (git-fixes).\n- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode (git-fixes).\n- USB: ulpi: fix memory leak on registration failure (git-fixes).\n- USB: usb-storage: ene_ub6250: restore media-ready check (git-fixes).\n- usb: xhci: Fix sleep in atomic context in xhci_free_streams() (git-fixes).\n- usbip: tools: support SuperSpeedPlus devices (git-fixes).\n- usbip: vudc: fix NULL deref in vep_dequeue() (git-fixes).\n- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).\n- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).\n- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).\n- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).\n- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (git-fixes).\n- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).\n- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).\n- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).\n- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).\n- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).\n- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).\n- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).\n- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).\n- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).\n- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).\n- wifi: mac80211: tear down new links on vif update error path (git-fixes).\n- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).\n- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).\n- wifi: mt76: Disable napi when removing device (git-fixes).\n- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).\n- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: fix crash in reset link replay (git-fixes).\n- wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() (git-fixes).\n- wifi: mt76: mt7925: guard link STA in decap offload (git-fixes).\n- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).\n- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).\n- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).\n- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).\n- wifi: mwifiex: fix roaming to different channel in host_mlme mode (git-fixes).\n- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).\n- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).\n- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).\n- xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).\n- xfs: only assert new size for datafork during truncate extents (bsc#1264084).\n- xfs: rearrange code in xfs_inode_item_precommit (bsc#1237449).\n- xfs: rework datasync tracking and execution (bsc#1237449).\n- xhci: dbgtty: fix device unregister (git-fixes).\n- xhci: dbgtty: fix device unregister: fixup (git-fixes).\n","status":"published","published":"2026-08-11T21:26:34Z","modified":"2026-08-15T18:23:51.243537972Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23221-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).\n- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).\n- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).\n- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).\n- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).\n- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).\n- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).\n- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).\n- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).\n- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).\n- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).\n- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).\n- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).\n- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).\n- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).\n- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).\n- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).\n- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).\n- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).\n- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).\n- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).\n- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).\n- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).\n- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).\n- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).\n- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).\n- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).\n- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).\n- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).\n- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).\n- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).\n- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).\n- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).\n- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).\n- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).\n- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).\n- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).\n- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).\n- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).\n- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).\n- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).\n- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).\n- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).\n- CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).\n- CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).\n- CVE-2026-46036: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470).\n- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).\n- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).\n- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).\n- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).\n- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).\n- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).\n- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).\n- CVE-2026-46121: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (bsc#1266932).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46130: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629).\n- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).\n- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).\n- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).\n- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).\n- CVE-2026-46170: mptcp: disable add_addr retransmission when timeout is 0 (bsc#1267714).\n- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).\n- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).\n- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).\n- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).\n- CVE-2026-46216: drm/xe/hdcp: Add NULL check for media_gt in (bsc#1267234).\n- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).\n- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).\n- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).\n- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).\n- CVE-2026-46287: net: txgbe: fix RTNL assertion warning when remove module (bsc#1267954).\n- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).\n- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).\n- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).\n- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).\n- CVE-2026-46327: dm: fix unlocked test for dm_suspended_md (bsc#1268031).\n- CVE-2026-46329: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038).\n- CVE-2026-52913: batman-adv: v: stop OGMv2 on disabled interface (bsc#1268985).\n- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).\n- CVE-2026-52916: batman-adv: frag: disallow unicast fragment in fragment (bsc#1269002).\n- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).\n- CVE-2026-52922: batman-adv: dat: handle forward allocation error (bsc#1269030).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52926: batman-adv: clear current gateway during teardown (bsc#1269025).\n- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).\n- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).\n- CVE-2026-52934: batman-adv: tvlv: reject oversized TVLV packets (bsc#1268994).\n- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).\n- CVE-2026-52941: net/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint (bsc#1268966).\n- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).\n- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).\n- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).\n- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).\n- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).\n- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).\n- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).\n- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).\n- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).\n- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).\n- CVE-2026-52988: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (bsc#1269362).\n- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).\n- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).\n- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).\n- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).\n- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).\n- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).\n- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).\n- CVE-2026-53005: af_unix: Drop all SCM attributes for SOCKMAP (bsc#1269107).\n- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).\n- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).\n- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).\n- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).\n- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).\n- CVE-2026-53014: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir\n  (bsc#1269092).\n- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).\n- CVE-2026-53035: bpf, sockmap: Fix af_unix iter deadlock (bsc#1269190).\n- CVE-2026-53038: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).\n- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).\n- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).\n- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).\n- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).\n- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).\n- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).\n- CVE-2026-53085: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).\n- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).\n- CVE-2026-53101: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (bsc#1269415).\n- CVE-2026-53104: wifi: mt76: Fix memory leak destroying device (bsc#1269157).\n- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).\n- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).\n- CVE-2026-53121: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (bsc#1269198).\n- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).\n- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).\n- CVE-2026-53157: net: phonet: free phonet_device after RCU grace period (bsc#1269241).\n- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).\n- CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).\n- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).\n- CVE-2026-53184: udp: clear skb-\u003edev before running a sockmap verdict (bsc#1269689).\n- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).\n- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).\n- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).\n- CVE-2026-53210: tee: shm: fix shm leak in register_shm_helper() (bsc#1269727).\n- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).\n- CVE-2026-53214: ipv6: Fix a potential NPD in cleanup_prefix_route() (bsc#1269588).\n- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).\n- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).\n- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).\n- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).\n- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269801).\n- CVE-2026-53235: net: add pskb_may_pull() to skb_gro_receive_list() (bsc#1269286).\n- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).\n- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).\n- CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (bsc#1269235).\n- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).\n- CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev() (bsc#1269307).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).\n- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).\n- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).\n- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).\n- CVE-2026-53321: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).\n- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).\n- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).\n- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).\n- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).\n- CVE-2026-53393: nfsd: reset write verifier on deferred writeback errors (bsc#1271858).\n- CVE-2026-53394: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race (bsc#1271859).\n- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).\n- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).\n- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).\n- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).\n- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).\n- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).\n- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).\n- CVE-2026-63831: mac802154: llsec: add skb_cow_data() before in-place crypto (bsc#1272184).\n- CVE-2026-63836: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (bsc#1272246).\n- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).\n- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).\n- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).\n- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).\n- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).\n- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).\n- CVE-2026-64061: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).\n- CVE-2026-64091: batman-adv: tt: fix TOCTOU race for reported vlans (bsc#1272514).\n- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).\n- CVE-2026-64157: netfs: Fix partial invalidation of streaming-write folio (bsc#1272462).\n- CVE-2026-64158: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).\n- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).\n- CVE-2026-64357: xfs: fix exchmaps reservation limit check (bsc#1272612).\n- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).\n- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).\n- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Fix wrong register read in LNL failure diagnostics (git-fixes).\n- accel/ivpu: Reject firmware log with size smaller than header (git-fixes).\n- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).\n- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).\n- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).\n- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).\n- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).\n- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).\n- ALSA: scarlett2: Allow selecting config_set by firmware version (stable-fixes).\n- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (git-fixes).\n- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).\n- ALSA: seq: Fix division by zero in initialize_timer() (git-fixes).\n- ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (git-fixes).\n- ALSA: timer: don't re-enter an instance callback that is still running (git-fixes).\n- ALSA: timer: drain a slave's callback before its master detaches it (git-fixes).\n- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).\n- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).\n- ALSA: usb-audio: fix stack info leak in RME Digiface status (git-fixes).\n- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).\n- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).\n- apparmor: fix use-after-free in rawdata dedup loop (git-fixes).\n- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (git-fixes).\n- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).\n- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).\n- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).\n- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).\n- ASoC: cs42l43: Correct report for forced microphone jack (git-fixes).\n- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP (git-fixes).\n- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).\n- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).\n- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup (git-fixes).\n- ASoC: tas2562: fix DVC coefficient write order (git-fixes).\n- ASoC: tas2781: bound firmware description string parsing (git-fixes).\n- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).\n- batman-adv: bla: reacquire gw address after skb realloc (git-fixes).\n- batman-adv: dat: ensure accessible eth_hdr proto field (git-fixes).\n- batman-adv: dat: fix tie-break for candidate selection (git-fixes).\n- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).\n- batman-adv: fix VLAN priority offset (git-fixes).\n- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).\n- batman-adv: frag: free unfragmentable packet (git-fixes).\n- batman-adv: mcast: avoid OOB read of num_dests header (git-fixes).\n- batman-adv: tt: avoid request storms during pending request (git-fixes).\n- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).\n- bitops: use common function parameter names (git-fixes).\n- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).\n- Bluetooth: 6lowpan: Fix using chan-\u003econn as indication to no remote netdev (git-fixes).\n- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).\n- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).\n- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).\n- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).\n- Bluetooth: hci_qca: Clear memdump state on invalid dump size (git-fixes).\n- Bluetooth: hci_sync: Fix advertising data UAFs (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback (git-fixes).\n- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).\n- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).\n- Bluetooth: HIDP: validate numbered report payloads (git-fixes).\n- Bluetooth: ISO: clear iso_data always when detaching conn from hcon (git-fixes).\n- Bluetooth: ISO: fix CONNECTED -\u003e CLOSED transition on shutdown/release (git-fixes).\n- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).\n- Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() (git-fixes).\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).\n- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).\n- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).\n- Bluetooth: SCO: give the socket its own sco_conn reference (git-fixes).\n- btrfs: do not trim a device which is not writeable (bsc#1272568).\n- bus: sunxi-rsb: Always check register address validity (git-fixes).\n- can: bcm: add missing rcu list annotations and operations (git-fixes).\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).\n- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).\n- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).\n- can: ctucanfd: handle bus error interrupts (git-fixes).\n- can: ctucanfd: mark error-active controller status valid (git-fixes).\n- can: ctucanfd: unmap BAR0 using base address (git-fixes).\n- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).\n- can: ems_usb: validate CPC message lengths (git-fixes).\n- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).\n- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure (git-fixes).\n- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).\n- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).\n- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).\n- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).\n- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).\n- can: peak_usb: add bounds check for USB channel index (git-fixes).\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).\n- can: peak_usb: validate uCAN receive record lengths (git-fixes).\n- can: softing: fw_parse(): validate firmware record spans (git-fixes).\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).\n- comedi: comedi_parport: deal with premature interrupt (git-fixes).\n- crypto/xxhash: set downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: introduce downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: qat - keep VFs enabled during reset (stable-fixes).\n- crypto: qat - notify fatal error before AER reset preparation (stable-fixes).\n- dm cache policy smq: check allocation under invalidate lock (git-fixes).\n- dm cache: fix missing return in invalidate_committed's error path (git-fixes).\n- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).\n- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).\n- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).\n- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).\n- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).\n- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).\n- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).\n- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).\n- drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference (git-fixes).\n- drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips (git-fixes).\n- drm/amd/display: set new_stream to NULL after release (git-fixes).\n- drm/amd/display: use proper context for logging (git-fixes).\n- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).\n- drm/amd/pm: fix amdgpu_pm_info power display units (git-fixes).\n- drm/amd/pm: fix smu13 power limit range calculation (git-fixes).\n- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge (git-fixes).\n- drm/amdgpu: fix aperture mapping leak (git-fixes).\n- drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment (git-fixes).\n- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).\n- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).\n- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).\n- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() (git-fixes).\n- drm/gfx10: Program DB_RING_CONTROL (git-fixes).\n- drm/i915/bios: range check LFP Data Block panel_type2 (git-fixes).\n- drm/i915/gem: Do not leak siblings[] on proto context error (git-fixes).\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU (git-fixes).\n- drm/i915/gt: use correct selftest config symbol (git-fixes).\n- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).\n- drm/i915: ensure segment offset never exceeds allowed max (stable-fixes).\n- drm/i915: Return NULL on error in active_instance (git-fixes).\n- drm/imagination: acquire vm_ctx-\u003elock before mapping memory to GPU VM (git-fixes).\n- drm/imagination: Fix double call to drm_sched_entity_fini() (git-fixes).\n- drm/imagination: fix error checking of pvr_vm_context_lookup() (git-fixes).\n- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY (git-fixes).\n- drm/imagination: Fix user array stride in pvr_set_uobj_array() (git-fixes).\n- drm/mediatek: Check CRTC state before freeing (git-fixes).\n- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).\n- drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() (git-fixes).\n- drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced (git-fixes).\n- drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() (git-fixes).\n- drm/panthor: Interrupt group start/resumption if group_bind_locked() fails (git-fixes).\n- drm/panthor: reject firmware sections with oversized data (git-fixes).\n- drm/panthor: return error on truncated firmware (git-fixes).\n- drm/panthor: validate firmware interface structure sizes (git-fixes).\n- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).\n- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).\n- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem (git-fixes).\n- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup (git-fixes).\n- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).\n- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).\n- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).\n- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).\n- drm/virtio: bound EDID block reads to the response buffer (git-fixes).\n- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).\n- drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure (git-fixes).\n- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).\n- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).\n- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).\n- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).\n- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).\n- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).\n- drm/xe/hw_engine: Fix double-free of managed BO in error path (git-fixes).\n- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays (git-fixes).\n- drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() (git-fixes).\n- drm/xe/wopcm: fix WOPCM size for LNL+ (git-fixes).\n- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds (git-fixes).\n- drm/xe: remove duplicate \u003ckunit/test-bug.h\u003e include (git-fixes).\n- erofs: set fileio bio failed in short read case (git-fixes).\n- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).\n- fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() (git-fixes).\n- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).\n- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).\n- fbdev: hecubafb: fix potential memory leak in hecubafb_probe() (git-fixes).\n- fbdev: i740fb: fix potential memory leak in i740fb_probe() (git-fixes).\n- fbdev: metronomefb: fix potential memory leak in metronomefb_probe() (git-fixes).\n- fbdev: nvidia: fix potential memory leak in nvidiafb_probe() (git-fixes).\n- fbdev: radeon: fix potential memory leak in radeonfb_pci_register() (git-fixes).\n- fbdev: s3fb: fix potential memory leak in s3_pci_probe() (git-fixes).\n- fbdev: sm501fb: Fix buffer errors in OF binding code (git-fixes).\n- fbdev: sm712: Fix operator precedence in big_swap macro (git-fixes).\n- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() (git-fixes).\n- fbdev: tridentfb: fix potential memory leak in trident_pci_probe() (git-fixes).\n- fbdev: uvesafb: fix potential memory leak in uvesafb_probe() (git-fixes).\n- fbdev: vesafb: fix memory leak in vesafb_probe() (git-fixes).\n- firewire: net: Fix fragmented datagram reassembly (git-fixes).\n- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).\n- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (git-fixes).\n- gpio-f7188x: Add support for NCT6126D version B (git-fixes).\n- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure (git-fixes).\n- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).\n- gpio: htc-egpio: use managed gpiochip registration (git-fixes).\n- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: free generic chips on unbind (git-fixes).\n- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).\n- gpio: rockchip: change the GPIO version judgment logic (stable-fixes).\n- gpio: rockchip: fix generic IRQ chip leak on remove (git-fixes).\n- gpio: rockchip: teardown bugs and resource leaks (git-fixes).\n- gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() (git-fixes).\n- gpio: tegra: do not call pinctrl for GPIO direction (git-fixes).\n- gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- gpios: palmas: add .get_direction() op (git-fixes).\n- HID: add haptics page defines (stable-fixes).\n- HID: hid-sjoy: race between init and usage (git-fixes).\n- HID: pidff: Add missing spaces (stable-fixes).\n- HID: pidff: Fix missing blank lines after declarations (stable-fixes).\n- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).\n- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).\n- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).\n- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).\n- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).\n- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).\n- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).\n- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).\n- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).\n- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).\n- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).\n- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).\n- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).\n- hwmon: (ltc4282) Fix reading the minimum alarm voltage (git-fixes).\n- hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (git-fixes).\n- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).\n- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).\n- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (nzxt-smart2) DMA-align output buffer (git-fixes).\n- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).\n- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).\n- hwmon: (sht3x) Fix unaligned accesses (git-fixes).\n- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).\n- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).\n- hwmon: occ: validate poll response sensor blocks (git-fixes).\n- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).\n- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).\n- i2c: imx: Fix slave registration race and error handling (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).\n- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).\n- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).\n- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).\n- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).\n- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).\n- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).\n- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).\n- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).\n- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).\n- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).\n- iio: accel: bmc150: clamp the device-reported FIFO frame count (git-fixes).\n- iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (git-fixes).\n- iio: adc: lpc32xx: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: spear: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: ti-ads124s08: Return reset GPIO lookup errors (git-fixes).\n- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable (git-fixes).\n- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).\n- iio: event: Fix event FIFO reset race (git-fixes).\n- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ (git-fixes).\n- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ (git-fixes).\n- iio: imu: inv_icm42600: fix timestamp clock period by using lower value (git-fixes).\n- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading (git-fixes).\n- iio: imu: st_lsm6dsx: deselect shub page before reading whoami (git-fixes).\n- iio: light: al3010: fix incorrect scale for the highest gain range (git-fixes).\n- iio: light: gp2ap002: fix runtime PM leak on read error (git-fixes).\n- iio: light: tsl2591: return actual error from probe IRQ failure (git-fixes).\n- iio: magnetometer: ak8975: fix potential kernel stack memory leak (git-fixes).\n- iio: temperature: Build mlx90635 with CONFIG_MLX90635 (git-fixes).\n- Input: ads7846 - restore half-duplex support (git-fixes).\n- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).\n- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).\n- Input: goodix - clamp the device-reported contact count (git-fixes).\n- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).\n- Input: ims-pcu - add response length checks (git-fixes).\n- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).\n- Input: ims-pcu - fix firmware leak in async update (git-fixes).\n- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).\n- Input: ims-pcu - fix logic error in packet reset (git-fixes).\n- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).\n- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).\n- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).\n- Input: ims-pcu - only expose sysfs attributes on control interface (git-fixes).\n- Input: ims-pcu - release data interface on disconnect (git-fixes).\n- Input: ims-pcu - validate control endpoint type (git-fixes).\n- Input: maple_keyb - set driver data before registering input device (stable-fixes).\n- Input: maplecontrol - set driver data before registering input device (stable-fixes).\n- Input: maplemouse - fix NULL pointer dereference in open() (git-fixes).\n- Input: maplemouse - set driver data before registering input device (stable-fixes).\n- Input: mms114 - fix multi-touch slot corruption (git-fixes).\n- Input: mms114 - fix touch indexing for MMS134S and MMS136 (git-fixes).\n- Input: mms114 - reject an oversized device packet size (git-fixes).\n- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).\n- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).\n- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).\n- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).\n- Input: rmi4 - fix register descriptor address calculation (git-fixes).\n- Input: rmi4 - fix type overflow in register counts (git-fixes).\n- Input: rmi4 - initialize attn_fifo properly (stable-fixes).\n- Input: rmi4 - iterative IRQ handler (git-fixes).\n- Input: rmi4 - refactor F12 probe function (stable-fixes).\n- Input: rmi4 - refactor function allocation and registration (stable-fixes).\n- Input: rmi4 - refactor register descriptor parsing (git-fixes).\n- Input: rmi4 - tolerate short register descriptor structure (git-fixes).\n- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).\n- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (git-fixes).\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (git-fixes).\n- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).\n- Input: touchwin - reset the packet index on every complete packet (git-fixes).\n- intel_th: core: fix null pointer dereference in intel_th_irq (bsc#1248480).\n- intel_th: fix MSC output device reference leak (git-fixes).\n- io_uring/kbuf: don't truncate end buffer for bundles (bsc#1271290).\n- io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF (bsc#1261250).\n- io_uring/kbuf: flag partial buffer mappings (bsc#1271290).\n- io_uring/kbuf: propagate BUF_MORE through early buffer commit path (bsc#1261250).\n- io_uring/net: always use current transfer count for buffer put (git-fixes).\n- io_uring/net: improve recv bundles (bsc#1271290).\n- io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries (bsc#1271290).\n- io_uring/net: only consider msg_inq if larger than 1 (git-fixes).\n- io_uring/net: only retry recv bundle for a full transfer (bsc#1271290).\n- io_uring/timeout: add helper for parsing user time (bsc#1271291).\n- io_uring/timeout: honour caller's time namespace for IORING_TIMEOUT_ABS (bsc#1271291).\n- io_uring/timeout: migrate reqs from ts64 to ktime (bsc#1271291).\n- io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER (bsc#1271291).\n- ixgbe: reduce number of reads when getting OROM data (bsc#1269637).\n- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT (git-fixes).\n- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (git-fixes).\n- KVM: nSVM: Clear tracking of L1-\u003eL2 NMI and soft IRQ on nested #VMEXIT (git-fixes).\n- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).\n- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (git-fixes).\n- KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs (git-fixes).\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).\n- KVM: TDX: Reject concurrent change to CPUID entry count (git-fixes).\n- KVM: x86/mmu: Check write tracking in all address spaces (git-fixes).\n- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).\n- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).\n- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).\n- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN (git-fixes).\n- leds: uleds: Fix potential buffer overread (git-fixes).\n- mac802154: hold an interface reference across the scan worker (git-fixes).\n- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).\n- mac802154: Prevent overwrite return code in mac802154_perform_association() (git-fixes).\n- mac802154: remove interfaces with RCU list deletion (git-fixes).\n- mailbox: zynqmp: setup IPI for each valid child node (bsc#1271395).\n- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (bsc#1266694).\n- media: aspeed: fix missing of_reserved_mem_device_release() on probe failure (git-fixes).\n- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).\n- media: atomisp: gc2235: fix UAF and memory leak (git-fixes).\n- media: cec: seco: unregister adapter on IR probe failure (git-fixes).\n- media: cedrus: Fix failure to clean up hardware on probe failure (git-fixes).\n- media: cedrus: Fix missing cleanup in error path (git-fixes).\n- media: cedrus: skip invalid H.264 reference list entries (git-fixes).\n- media: marvell-cam: fix missing pci_disable_device() on remove (git-fixes).\n- media: mtk-jpeg: cancel workqueue on release for supported platforms only (git-fixes).\n- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).\n- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).\n- media: pci: dm1105: Free allocated workqueue (git-fixes).\n- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite (git-fixes).\n- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).\n- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).\n- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).\n- media: rockchip: rga: fix too small buffer size (git-fixes).\n- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).\n- media: ti: vpe: unwind v4l2 device registration on probe error (git-fixes).\n- media: uvcvideo: Avoid partial metadata buffers (git-fixes).\n- media: uvcvideo: Do not add clock samples with small sof delta (git-fixes).\n- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).\n- media: uvcvideo: Fix dev_sof filtering in hw timestamp (git-fixes).\n- media: uvcvideo: Fix sequence number when no EOF (git-fixes).\n- media: uvcvideo: Relax the constrains for interpolating the hw clock (git-fixes).\n- media: uvcvideo: Use hw timestaming if the clock buffer is full (git-fixes).\n- media: v4l2-common: Add YUV24 format info (git-fixes).\n- media: v4l2-ctrls: validate HEVC active reference counts (git-fixes).\n- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (git-fixes).\n- media: vidtv: fix reference leak on failed device registration (git-fixes).\n- media: vimc: fix reference leak on failed device registration (git-fixes).\n- media: vpif_capture: fix OF node reference imbalance (git-fixes).\n- mei: bus: access mei_device under device_lock on cleanup (git-fixes).\n- memory: tegra: Wire up system sleep PM ops (git-fixes).\n- memstick: ms_block: reject a card that reports too many blocks (git-fixes).\n- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).\n- mfd: cs42l43: Sanity check firmware size (git-fixes).\n- mfd: rsmu: Fix page register setup (git-fixes).\n- mfd: sm501: Fix reference leak on failed device registration (git-fixes).\n- mfd: tps6586x: Fix OF node refcount (git-fixes).\n- misc: nsm: only unlock nsm_dev on post-lock error paths (git-fixes).\n- misc: nsm: pin the module while the device is open (git-fixes).\n- mkspec-dtb: Skip missing DTBs.\n- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).\n- mmc: block: fix RPMB device unregister ordering (git-fixes).\n- mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method (git-fixes).\n- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).\n- mshv: fix hv_input_get_system_property struct (git-fixes).\n- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).\n- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).\n- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).\n- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).\n- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).\n- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).\n- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).\n- net: mana: Add Interrupt Moderation support (bsc#1271368).\n- net: mana: Return error code from mana_create_rxq() (git-fixes).\n- net: mctp i2c: Copy headers if cloned (bsc#1266694).\n- net: mctp-i2c: fix duplicate reception of old data (bsc#1266694).\n- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).\n- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).\n- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).\n- net: wwan: t7xx: check skb_clone in control TX (git-fixes).\n- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).\n- netfs: Defer the emission of trace_netfs_folio() (git-fixes).\n- of: cpu: add check in __of_find_n_match_cpu_property() (git-fixes).\n- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (git-fixes).\n- phy: phy-can-transceiver: Check driver match and driver data against NULL (git-fixes).\n- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).\n- phy: zynqmp: fix runtime PM leak on probe allocation failure (git-fixes).\n- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).\n- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).\n- pinctrl-amd: Don't clear S4 wake bits at probe (git-fixes).\n- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).\n- pinctrl: cs42l43: Fix polarity on debounce (git-fixes).\n- pinctrl: devicetree: don't free uninitialized dev_name on error path (git-fixes).\n- pinctrl: equilibrium: fix warning trace on load (git-fixes).\n- pinctrl: equilibrium: rename irq_chip function callbacks (stable-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: meson: restore non-sleeping GPIO access (git-fixes).\n- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table (git-fixes).\n- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).\n- pinctrl: qcom: Unconditionally mark gpio as wakeup enable (git-fixes).\n- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path (git-fixes).\n- pkspec-dtb: Fix dtb-al rename.\n- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).\n- platform/x86/amd/pmc: Avoid logging \"(null)\" for DMI values (git-fixes).\n- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).\n- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).\n- platform/x86/amd/pmc: Don't log during intermediate wakeups (stable-fixes).\n- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (git-fixes).\n- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).\n- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).\n- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912).\n- posix-timers: Add proper state tracking (bsc#1271912).\n- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).\n- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).\n- power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() (git-fixes).\n- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).\n- power: supply: max17040: handle missing status supplier (git-fixes).\n- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).\n- regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (git-fixes).\n- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).\n- regulator: mt6358: use regmap helper to read fixed LDO calibration (git-fixes).\n- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).\n- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).\n- Revert \"Input: rmi4 - fix register descriptor address calculation\" (stable-fixes).\n- sctp: validate embedded address parameter length (git-fixes).\n- security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() (git-fixes).\n- selftests: Disable dad for ipv6 in fcnal-test.sh (bsc#1272871).\n- selftests: Replace sleep with slowwait (bsc#1272871).\n- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).\n- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).\n- serial: 8250_omap: clear rx_running on zero-length DMA completes (git-fixes).\n- serial: msm: Disable DMA for kernel console UART (git-fixes).\n- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).\n- soc: fsl: qe: panic on ioremap() failure in qe_reset() (git-fixes).\n- soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy (git-fixes).\n- soc: xilinx: Shutdown and free rx mailbox channel (git-fixes).\n- spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure (git-fixes).\n- spi: sh-msiof: abort transfers when reset times out (git-fixes).\n- staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() (git-fixes).\n- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).\n- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).\n- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).\n- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB write in HT_caps_handler() (git-fixes).\n- staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (git-fixes).\n- thermal: core: Free thermal zone ID later during removal (git-fixes).\n- time: Switch to hrtimer_setup() (bsc#1271912).\n- tpm: Make the TPM character devices non-seekable (git-fixes).\n- uio_hv_generic: Bind to FCopy device by default (git-fixes).\n- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).\n- usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() (git-fixes).\n- USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (git-fixes).\n- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).\n- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).\n- usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() (git-fixes).\n- usb: dwc3: run gadget disconnect from sleepable suspend context (git-fixes).\n- usb: free iso schedules on failed submit (git-fixes).\n- usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (git-fixes).\n- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).\n- usb: gadget: f_fs: Fix DMA fence leak (git-fixes).\n- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).\n- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).\n- usb: gadget: f_printer: take kref only for successful open (git-fixes).\n- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: function: rndis: add length check for header (stable-fixes).\n- usb: gadget: function: rndis: add length check to response query (stable-fixes).\n- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).\n- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).\n- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).\n- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).\n- USB: idmouse: fix use-after-free on disconnect race (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).\n- usb: iowarrior: remove inherent race with minor number (stable-fixes).\n- USB: ldusb: fix use-after-free on disconnect race (git-fixes).\n- USB: legousbtower: fix use-after-free on disconnect race (git-fixes).\n- USB: misc: uss720: unregister parport on probe failure (git-fixes).\n- usb: mtu3: unmap request DMA on queue failure (git-fixes).\n- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).\n- USB: serial: digi_acceleport: fix broken rx after throttle (git-fixes).\n- USB: serial: digi_acceleport: fix hard lockup on disconnect (git-fixes).\n- USB: serial: digi_acceleport: fix write buffer corruption (git-fixes).\n- USB: serial: io_edgeport: cap received transmit credits (git-fixes).\n- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).\n- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).\n- USB: serial: keyspan_pda: fix information leak (git-fixes).\n- USB: serial: mxuport: validate firmware header size (git-fixes).\n- USB: serial: option: add MeiG SRM813Q (stable-fixes).\n- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).\n- usb: sl811-hcd: disable controller wakeup on remove (git-fixes).\n- USB: storage: include US_FL_NO_SAME in quirks mask (git-fixes).\n- usb: typec: anx7411: use devm_pm_runtime_enable() (git-fixes).\n- usb: typec: class: drop PD lookup reference (git-fixes).\n- usb: typec: tcpm: Fix VDM type for Enter Mode commands (git-fixes).\n- usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (git-fixes).\n- usb: typec: ucsi: cancel pending work on system suspend (git-fixes).\n- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove (git-fixes).\n- usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware (git-fixes).\n- usb: typec: ucsi: Invert DisplayPort role assignment (git-fixes).\n- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode (git-fixes).\n- USB: ulpi: fix memory leak on registration failure (git-fixes).\n- USB: usb-storage: ene_ub6250: restore media-ready check (git-fixes).\n- usb: xhci: Fix sleep in atomic context in xhci_free_streams() (git-fixes).\n- usbip: tools: support SuperSpeedPlus devices (git-fixes).\n- usbip: vudc: fix NULL deref in vep_dequeue() (git-fixes).\n- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).\n- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).\n- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).\n- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).\n- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (git-fixes).\n- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).\n- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).\n- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).\n- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).\n- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).\n- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).\n- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).\n- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).\n- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).\n- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).\n- wifi: mac80211: tear down new links on vif update error path (git-fixes).\n- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).\n- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).\n- wifi: mt76: Disable napi when removing device (git-fixes).\n- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).\n- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: fix crash in reset link replay (git-fixes).\n- wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() (git-fixes).\n- wifi: mt76: mt7925: guard link STA in decap offload (git-fixes).\n- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).\n- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).\n- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).\n- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).\n- wifi: mwifiex: fix roaming to different channel in host_mlme mode (git-fixes).\n- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).\n- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).\n- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).\n- xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).\n- xfs: only assert new size for datafork during truncate extents (bsc#1264084).\n- xfs: rearrange code in xfs_inode_item_precommit (bsc#1237449).\n- xfs: rework datasync tracking and execution (bsc#1237449).\n- xhci: dbgtty: fix device unregister (git-fixes).\n- xhci: dbgtty: fix device unregister: fixup (git-fixes).\n","status":"published","published":"2026-08-11T21:26:34Z","modified":"2026-08-27T18:23:09.328001936Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23231-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).\n- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).\n- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).\n- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).\n- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).\n- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).\n- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).\n- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).\n- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).\n- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).\n- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).\n- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).\n- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).\n- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).\n- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).\n- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).\n- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).\n- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).\n- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).\n- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).\n- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).\n- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).\n- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).\n- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).\n- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).\n- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).\n- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).\n- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).\n- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).\n- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).\n- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).\n- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).\n- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).\n- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).\n- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).\n- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).\n- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).\n- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).\n- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).\n- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).\n- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).\n- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).\n- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).\n- CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).\n- CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).\n- CVE-2026-46036: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470).\n- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).\n- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).\n- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).\n- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).\n- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).\n- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).\n- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).\n- CVE-2026-46121: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (bsc#1266932).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46130: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629).\n- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).\n- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).\n- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).\n- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).\n- CVE-2026-46170: mptcp: disable add_addr retransmission when timeout is 0 (bsc#1267714).\n- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).\n- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).\n- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).\n- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).\n- CVE-2026-46216: drm/xe/hdcp: Add NULL check for media_gt in (bsc#1267234).\n- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).\n- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).\n- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).\n- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).\n- CVE-2026-46287: net: txgbe: fix RTNL assertion warning when remove module (bsc#1267954).\n- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).\n- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).\n- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).\n- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).\n- CVE-2026-46327: dm: fix unlocked test for dm_suspended_md (bsc#1268031).\n- CVE-2026-46329: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038).\n- CVE-2026-52913: batman-adv: v: stop OGMv2 on disabled interface (bsc#1268985).\n- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).\n- CVE-2026-52916: batman-adv: frag: disallow unicast fragment in fragment (bsc#1269002).\n- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).\n- CVE-2026-52922: batman-adv: dat: handle forward allocation error (bsc#1269030).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52926: batman-adv: clear current gateway during teardown (bsc#1269025).\n- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).\n- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).\n- CVE-2026-52934: batman-adv: tvlv: reject oversized TVLV packets (bsc#1268994).\n- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).\n- CVE-2026-52941: net/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint (bsc#1268966).\n- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).\n- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).\n- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).\n- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).\n- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).\n- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).\n- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).\n- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).\n- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).\n- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).\n- CVE-2026-52988: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (bsc#1269362).\n- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).\n- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).\n- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).\n- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).\n- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).\n- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).\n- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).\n- CVE-2026-53005: af_unix: Drop all SCM attributes for SOCKMAP (bsc#1269107).\n- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).\n- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).\n- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).\n- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).\n- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).\n- CVE-2026-53014: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir\n  (bsc#1269092).\n- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).\n- CVE-2026-53035: bpf, sockmap: Fix af_unix iter deadlock (bsc#1269190).\n- CVE-2026-53038: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).\n- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).\n- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).\n- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).\n- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).\n- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).\n- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).\n- CVE-2026-53085: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).\n- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).\n- CVE-2026-53101: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (bsc#1269415).\n- CVE-2026-53104: wifi: mt76: Fix memory leak destroying device (bsc#1269157).\n- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).\n- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).\n- CVE-2026-53121: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (bsc#1269198).\n- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).\n- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).\n- CVE-2026-53157: net: phonet: free phonet_device after RCU grace period (bsc#1269241).\n- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).\n- CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).\n- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).\n- CVE-2026-53184: udp: clear skb-\u003edev before running a sockmap verdict (bsc#1269689).\n- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).\n- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).\n- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).\n- CVE-2026-53210: tee: shm: fix shm leak in register_shm_helper() (bsc#1269727).\n- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).\n- CVE-2026-53214: ipv6: Fix a potential NPD in cleanup_prefix_route() (bsc#1269588).\n- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).\n- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).\n- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).\n- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).\n- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269801).\n- CVE-2026-53235: net: add pskb_may_pull() to skb_gro_receive_list() (bsc#1269286).\n- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).\n- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).\n- CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (bsc#1269235).\n- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).\n- CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev() (bsc#1269307).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).\n- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).\n- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).\n- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).\n- CVE-2026-53321: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).\n- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).\n- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).\n- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).\n- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).\n- CVE-2026-53393: nfsd: reset write verifier on deferred writeback errors (bsc#1271858).\n- CVE-2026-53394: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race (bsc#1271859).\n- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).\n- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).\n- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).\n- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).\n- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).\n- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).\n- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).\n- CVE-2026-63831: mac802154: llsec: add skb_cow_data() before in-place crypto (bsc#1272184).\n- CVE-2026-63836: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (bsc#1272246).\n- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).\n- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).\n- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).\n- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).\n- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).\n- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).\n- CVE-2026-64061: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).\n- CVE-2026-64091: batman-adv: tt: fix TOCTOU race for reported vlans (bsc#1272514).\n- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).\n- CVE-2026-64157: netfs: Fix partial invalidation of streaming-write folio (bsc#1272462).\n- CVE-2026-64158: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).\n- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).\n- CVE-2026-64357: xfs: fix exchmaps reservation limit check (bsc#1272612).\n- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).\n- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).\n- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Fix wrong register read in LNL failure diagnostics (git-fixes).\n- accel/ivpu: Reject firmware log with size smaller than header (git-fixes).\n- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).\n- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).\n- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).\n- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).\n- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).\n- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).\n- ALSA: scarlett2: Allow selecting config_set by firmware version (stable-fixes).\n- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (git-fixes).\n- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).\n- ALSA: seq: Fix division by zero in initialize_timer() (git-fixes).\n- ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (git-fixes).\n- ALSA: timer: don't re-enter an instance callback that is still running (git-fixes).\n- ALSA: timer: drain a slave's callback before its master detaches it (git-fixes).\n- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).\n- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).\n- ALSA: usb-audio: fix stack info leak in RME Digiface status (git-fixes).\n- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).\n- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).\n- apparmor: fix use-after-free in rawdata dedup loop (git-fixes).\n- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (git-fixes).\n- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).\n- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).\n- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).\n- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).\n- ASoC: cs42l43: Correct report for forced microphone jack (git-fixes).\n- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP (git-fixes).\n- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).\n- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).\n- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup (git-fixes).\n- ASoC: tas2562: fix DVC coefficient write order (git-fixes).\n- ASoC: tas2781: bound firmware description string parsing (git-fixes).\n- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).\n- batman-adv: bla: reacquire gw address after skb realloc (git-fixes).\n- batman-adv: dat: ensure accessible eth_hdr proto field (git-fixes).\n- batman-adv: dat: fix tie-break for candidate selection (git-fixes).\n- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).\n- batman-adv: fix VLAN priority offset (git-fixes).\n- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).\n- batman-adv: frag: free unfragmentable packet (git-fixes).\n- batman-adv: mcast: avoid OOB read of num_dests header (git-fixes).\n- batman-adv: tt: avoid request storms during pending request (git-fixes).\n- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).\n- bitops: use common function parameter names (git-fixes).\n- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).\n- Bluetooth: 6lowpan: Fix using chan-\u003econn as indication to no remote netdev (git-fixes).\n- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).\n- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).\n- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).\n- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).\n- Bluetooth: hci_qca: Clear memdump state on invalid dump size (git-fixes).\n- Bluetooth: hci_sync: Fix advertising data UAFs (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback (git-fixes).\n- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).\n- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).\n- Bluetooth: HIDP: validate numbered report payloads (git-fixes).\n- Bluetooth: ISO: clear iso_data always when detaching conn from hcon (git-fixes).\n- Bluetooth: ISO: fix CONNECTED -\u003e CLOSED transition on shutdown/release (git-fixes).\n- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).\n- Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() (git-fixes).\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).\n- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).\n- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).\n- Bluetooth: SCO: give the socket its own sco_conn reference (git-fixes).\n- btrfs: do not trim a device which is not writeable (bsc#1272568).\n- bus: sunxi-rsb: Always check register address validity (git-fixes).\n- can: bcm: add missing rcu list annotations and operations (git-fixes).\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).\n- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).\n- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).\n- can: ctucanfd: handle bus error interrupts (git-fixes).\n- can: ctucanfd: mark error-active controller status valid (git-fixes).\n- can: ctucanfd: unmap BAR0 using base address (git-fixes).\n- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).\n- can: ems_usb: validate CPC message lengths (git-fixes).\n- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).\n- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure (git-fixes).\n- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).\n- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).\n- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).\n- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).\n- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).\n- can: peak_usb: add bounds check for USB channel index (git-fixes).\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).\n- can: peak_usb: validate uCAN receive record lengths (git-fixes).\n- can: softing: fw_parse(): validate firmware record spans (git-fixes).\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).\n- comedi: comedi_parport: deal with premature interrupt (git-fixes).\n- crypto/xxhash: set downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: introduce downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: qat - keep VFs enabled during reset (stable-fixes).\n- crypto: qat - notify fatal error before AER reset preparation (stable-fixes).\n- dm cache policy smq: check allocation under invalidate lock (git-fixes).\n- dm cache: fix missing return in invalidate_committed's error path (git-fixes).\n- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).\n- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).\n- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).\n- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).\n- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).\n- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).\n- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).\n- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).\n- drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference (git-fixes).\n- drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips (git-fixes).\n- drm/amd/display: set new_stream to NULL after release (git-fixes).\n- drm/amd/display: use proper context for logging (git-fixes).\n- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).\n- drm/amd/pm: fix amdgpu_pm_info power display units (git-fixes).\n- drm/amd/pm: fix smu13 power limit range calculation (git-fixes).\n- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge (git-fixes).\n- drm/amdgpu: fix aperture mapping leak (git-fixes).\n- drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment (git-fixes).\n- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).\n- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).\n- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).\n- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() (git-fixes).\n- drm/gfx10: Program DB_RING_CONTROL (git-fixes).\n- drm/i915/bios: range check LFP Data Block panel_type2 (git-fixes).\n- drm/i915/gem: Do not leak siblings[] on proto context error (git-fixes).\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU (git-fixes).\n- drm/i915/gt: use correct selftest config symbol (git-fixes).\n- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).\n- drm/i915: ensure segment offset never exceeds allowed max (stable-fixes).\n- drm/i915: Return NULL on error in active_instance (git-fixes).\n- drm/imagination: acquire vm_ctx-\u003elock before mapping memory to GPU VM (git-fixes).\n- drm/imagination: Fix double call to drm_sched_entity_fini() (git-fixes).\n- drm/imagination: fix error checking of pvr_vm_context_lookup() (git-fixes).\n- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY (git-fixes).\n- drm/imagination: Fix user array stride in pvr_set_uobj_array() (git-fixes).\n- drm/mediatek: Check CRTC state before freeing (git-fixes).\n- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).\n- drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() (git-fixes).\n- drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced (git-fixes).\n- drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() (git-fixes).\n- drm/panthor: Interrupt group start/resumption if group_bind_locked() fails (git-fixes).\n- drm/panthor: reject firmware sections with oversized data (git-fixes).\n- drm/panthor: return error on truncated firmware (git-fixes).\n- drm/panthor: validate firmware interface structure sizes (git-fixes).\n- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).\n- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).\n- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem (git-fixes).\n- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup (git-fixes).\n- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).\n- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).\n- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).\n- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).\n- drm/virtio: bound EDID block reads to the response buffer (git-fixes).\n- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).\n- drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure (git-fixes).\n- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).\n- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).\n- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).\n- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).\n- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).\n- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).\n- drm/xe/hw_engine: Fix double-free of managed BO in error path (git-fixes).\n- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays (git-fixes).\n- drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() (git-fixes).\n- drm/xe/wopcm: fix WOPCM size for LNL+ (git-fixes).\n- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds (git-fixes).\n- drm/xe: remove duplicate \u003ckunit/test-bug.h\u003e include (git-fixes).\n- erofs: set fileio bio failed in short read case (git-fixes).\n- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).\n- fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() (git-fixes).\n- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).\n- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).\n- fbdev: hecubafb: fix potential memory leak in hecubafb_probe() (git-fixes).\n- fbdev: i740fb: fix potential memory leak in i740fb_probe() (git-fixes).\n- fbdev: metronomefb: fix potential memory leak in metronomefb_probe() (git-fixes).\n- fbdev: nvidia: fix potential memory leak in nvidiafb_probe() (git-fixes).\n- fbdev: radeon: fix potential memory leak in radeonfb_pci_register() (git-fixes).\n- fbdev: s3fb: fix potential memory leak in s3_pci_probe() (git-fixes).\n- fbdev: sm501fb: Fix buffer errors in OF binding code (git-fixes).\n- fbdev: sm712: Fix operator precedence in big_swap macro (git-fixes).\n- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() (git-fixes).\n- fbdev: tridentfb: fix potential memory leak in trident_pci_probe() (git-fixes).\n- fbdev: uvesafb: fix potential memory leak in uvesafb_probe() (git-fixes).\n- fbdev: vesafb: fix memory leak in vesafb_probe() (git-fixes).\n- firewire: net: Fix fragmented datagram reassembly (git-fixes).\n- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).\n- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (git-fixes).\n- gpio-f7188x: Add support for NCT6126D version B (git-fixes).\n- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure (git-fixes).\n- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).\n- gpio: htc-egpio: use managed gpiochip registration (git-fixes).\n- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: free generic chips on unbind (git-fixes).\n- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).\n- gpio: rockchip: change the GPIO version judgment logic (stable-fixes).\n- gpio: rockchip: fix generic IRQ chip leak on remove (git-fixes).\n- gpio: rockchip: teardown bugs and resource leaks (git-fixes).\n- gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() (git-fixes).\n- gpio: tegra: do not call pinctrl for GPIO direction (git-fixes).\n- gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- gpios: palmas: add .get_direction() op (git-fixes).\n- HID: add haptics page defines (stable-fixes).\n- HID: hid-sjoy: race between init and usage (git-fixes).\n- HID: pidff: Add missing spaces (stable-fixes).\n- HID: pidff: Fix missing blank lines after declarations (stable-fixes).\n- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).\n- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).\n- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).\n- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).\n- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).\n- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).\n- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).\n- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).\n- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).\n- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).\n- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).\n- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).\n- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).\n- hwmon: (ltc4282) Fix reading the minimum alarm voltage (git-fixes).\n- hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (git-fixes).\n- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).\n- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).\n- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (nzxt-smart2) DMA-align output buffer (git-fixes).\n- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).\n- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).\n- hwmon: (sht3x) Fix unaligned accesses (git-fixes).\n- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).\n- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).\n- hwmon: occ: validate poll response sensor blocks (git-fixes).\n- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).\n- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).\n- i2c: imx: Fix slave registration race and error handling (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).\n- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).\n- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).\n- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).\n- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).\n- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).\n- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).\n- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).\n- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).\n- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).\n- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).\n- iio: accel: bmc150: clamp the device-reported FIFO frame count (git-fixes).\n- iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (git-fixes).\n- iio: adc: lpc32xx: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: spear: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: ti-ads124s08: Return reset GPIO lookup errors (git-fixes).\n- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable (git-fixes).\n- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).\n- iio: event: Fix event FIFO reset race (git-fixes).\n- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ (git-fixes).\n- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ (git-fixes).\n- iio: imu: inv_icm42600: fix timestamp clock period by using lower value (git-fixes).\n- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading (git-fixes).\n- iio: imu: st_lsm6dsx: deselect shub page before reading whoami (git-fixes).\n- iio: light: al3010: fix incorrect scale for the highest gain range (git-fixes).\n- iio: light: gp2ap002: fix runtime PM leak on read error (git-fixes).\n- iio: light: tsl2591: return actual error from probe IRQ failure (git-fixes).\n- iio: magnetometer: ak8975: fix potential kernel stack memory leak (git-fixes).\n- iio: temperature: Build mlx90635 with CONFIG_MLX90635 (git-fixes).\n- Input: ads7846 - restore half-duplex support (git-fixes).\n- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).\n- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).\n- Input: goodix - clamp the device-reported contact count (git-fixes).\n- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).\n- Input: ims-pcu - add response length checks (git-fixes).\n- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).\n- Input: ims-pcu - fix firmware leak in async update (git-fixes).\n- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).\n- Input: ims-pcu - fix logic error in packet reset (git-fixes).\n- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).\n- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).\n- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).\n- Input: ims-pcu - only expose sysfs attributes on control interface (git-fixes).\n- Input: ims-pcu - release data interface on disconnect (git-fixes).\n- Input: ims-pcu - validate control endpoint type (git-fixes).\n- Input: maple_keyb - set driver data before registering input device (stable-fixes).\n- Input: maplecontrol - set driver data before registering input device (stable-fixes).\n- Input: maplemouse - fix NULL pointer dereference in open() (git-fixes).\n- Input: maplemouse - set driver data before registering input device (stable-fixes).\n- Input: mms114 - fix multi-touch slot corruption (git-fixes).\n- Input: mms114 - fix touch indexing for MMS134S and MMS136 (git-fixes).\n- Input: mms114 - reject an oversized device packet size (git-fixes).\n- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).\n- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).\n- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).\n- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).\n- Input: rmi4 - fix register descriptor address calculation (git-fixes).\n- Input: rmi4 - fix type overflow in register counts (git-fixes).\n- Input: rmi4 - initialize attn_fifo properly (stable-fixes).\n- Input: rmi4 - iterative IRQ handler (git-fixes).\n- Input: rmi4 - refactor F12 probe function (stable-fixes).\n- Input: rmi4 - refactor function allocation and registration (stable-fixes).\n- Input: rmi4 - refactor register descriptor parsing (git-fixes).\n- Input: rmi4 - tolerate short register descriptor structure (git-fixes).\n- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).\n- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (git-fixes).\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (git-fixes).\n- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).\n- Input: touchwin - reset the packet index on every complete packet (git-fixes).\n- intel_th: core: fix null pointer dereference in intel_th_irq (bsc#1248480).\n- intel_th: fix MSC output device reference leak (git-fixes).\n- io_uring/kbuf: don't truncate end buffer for bundles (bsc#1271290).\n- io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF (bsc#1261250).\n- io_uring/kbuf: flag partial buffer mappings (bsc#1271290).\n- io_uring/kbuf: propagate BUF_MORE through early buffer commit path (bsc#1261250).\n- io_uring/net: always use current transfer count for buffer put (git-fixes).\n- io_uring/net: improve recv bundles (bsc#1271290).\n- io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries (bsc#1271290).\n- io_uring/net: only consider msg_inq if larger than 1 (git-fixes).\n- io_uring/net: only retry recv bundle for a full transfer (bsc#1271290).\n- io_uring/timeout: add helper for parsing user time (bsc#1271291).\n- io_uring/timeout: honour caller's time namespace for IORING_TIMEOUT_ABS (bsc#1271291).\n- io_uring/timeout: migrate reqs from ts64 to ktime (bsc#1271291).\n- io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER (bsc#1271291).\n- ixgbe: reduce number of reads when getting OROM data (bsc#1269637).\n- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT (git-fixes).\n- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (git-fixes).\n- KVM: nSVM: Clear tracking of L1-\u003eL2 NMI and soft IRQ on nested #VMEXIT (git-fixes).\n- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).\n- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (git-fixes).\n- KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs (git-fixes).\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).\n- KVM: TDX: Reject concurrent change to CPUID entry count (git-fixes).\n- KVM: x86/mmu: Check write tracking in all address spaces (git-fixes).\n- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).\n- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).\n- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).\n- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN (git-fixes).\n- leds: uleds: Fix potential buffer overread (git-fixes).\n- mac802154: hold an interface reference across the scan worker (git-fixes).\n- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).\n- mac802154: Prevent overwrite return code in mac802154_perform_association() (git-fixes).\n- mac802154: remove interfaces with RCU list deletion (git-fixes).\n- mailbox: zynqmp: setup IPI for each valid child node (bsc#1271395).\n- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (bsc#1266694).\n- media: aspeed: fix missing of_reserved_mem_device_release() on probe failure (git-fixes).\n- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).\n- media: atomisp: gc2235: fix UAF and memory leak (git-fixes).\n- media: cec: seco: unregister adapter on IR probe failure (git-fixes).\n- media: cedrus: Fix failure to clean up hardware on probe failure (git-fixes).\n- media: cedrus: Fix missing cleanup in error path (git-fixes).\n- media: cedrus: skip invalid H.264 reference list entries (git-fixes).\n- media: marvell-cam: fix missing pci_disable_device() on remove (git-fixes).\n- media: mtk-jpeg: cancel workqueue on release for supported platforms only (git-fixes).\n- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).\n- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).\n- media: pci: dm1105: Free allocated workqueue (git-fixes).\n- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite (git-fixes).\n- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).\n- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).\n- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).\n- media: rockchip: rga: fix too small buffer size (git-fixes).\n- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).\n- media: ti: vpe: unwind v4l2 device registration on probe error (git-fixes).\n- media: uvcvideo: Avoid partial metadata buffers (git-fixes).\n- media: uvcvideo: Do not add clock samples with small sof delta (git-fixes).\n- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).\n- media: uvcvideo: Fix dev_sof filtering in hw timestamp (git-fixes).\n- media: uvcvideo: Fix sequence number when no EOF (git-fixes).\n- media: uvcvideo: Relax the constrains for interpolating the hw clock (git-fixes).\n- media: uvcvideo: Use hw timestaming if the clock buffer is full (git-fixes).\n- media: v4l2-common: Add YUV24 format info (git-fixes).\n- media: v4l2-ctrls: validate HEVC active reference counts (git-fixes).\n- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (git-fixes).\n- media: vidtv: fix reference leak on failed device registration (git-fixes).\n- media: vimc: fix reference leak on failed device registration (git-fixes).\n- media: vpif_capture: fix OF node reference imbalance (git-fixes).\n- mei: bus: access mei_device under device_lock on cleanup (git-fixes).\n- memory: tegra: Wire up system sleep PM ops (git-fixes).\n- memstick: ms_block: reject a card that reports too many blocks (git-fixes).\n- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).\n- mfd: cs42l43: Sanity check firmware size (git-fixes).\n- mfd: rsmu: Fix page register setup (git-fixes).\n- mfd: sm501: Fix reference leak on failed device registration (git-fixes).\n- mfd: tps6586x: Fix OF node refcount (git-fixes).\n- misc: nsm: only unlock nsm_dev on post-lock error paths (git-fixes).\n- misc: nsm: pin the module while the device is open (git-fixes).\n- mkspec-dtb: Skip missing DTBs.\n- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).\n- mmc: block: fix RPMB device unregister ordering (git-fixes).\n- mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method (git-fixes).\n- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).\n- mshv: fix hv_input_get_system_property struct (git-fixes).\n- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).\n- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).\n- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).\n- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).\n- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).\n- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).\n- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).\n- net: mana: Add Interrupt Moderation support (bsc#1271368).\n- net: mana: Return error code from mana_create_rxq() (git-fixes).\n- net: mctp i2c: Copy headers if cloned (bsc#1266694).\n- net: mctp-i2c: fix duplicate reception of old data (bsc#1266694).\n- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).\n- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).\n- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).\n- net: wwan: t7xx: check skb_clone in control TX (git-fixes).\n- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).\n- netfs: Defer the emission of trace_netfs_folio() (git-fixes).\n- of: cpu: add check in __of_find_n_match_cpu_property() (git-fixes).\n- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (git-fixes).\n- phy: phy-can-transceiver: Check driver match and driver data against NULL (git-fixes).\n- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).\n- phy: zynqmp: fix runtime PM leak on probe allocation failure (git-fixes).\n- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).\n- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).\n- pinctrl-amd: Don't clear S4 wake bits at probe (git-fixes).\n- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).\n- pinctrl: cs42l43: Fix polarity on debounce (git-fixes).\n- pinctrl: devicetree: don't free uninitialized dev_name on error path (git-fixes).\n- pinctrl: equilibrium: fix warning trace on load (git-fixes).\n- pinctrl: equilibrium: rename irq_chip function callbacks (stable-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: meson: restore non-sleeping GPIO access (git-fixes).\n- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table (git-fixes).\n- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).\n- pinctrl: qcom: Unconditionally mark gpio as wakeup enable (git-fixes).\n- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path (git-fixes).\n- pkspec-dtb: Fix dtb-al rename.\n- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).\n- platform/x86/amd/pmc: Avoid logging \"(null)\" for DMI values (git-fixes).\n- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).\n- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).\n- platform/x86/amd/pmc: Don't log during intermediate wakeups (stable-fixes).\n- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (git-fixes).\n- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).\n- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).\n- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912).\n- posix-timers: Add proper state tracking (bsc#1271912).\n- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).\n- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).\n- power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() (git-fixes).\n- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).\n- power: supply: max17040: handle missing status supplier (git-fixes).\n- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).\n- regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (git-fixes).\n- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).\n- regulator: mt6358: use regmap helper to read fixed LDO calibration (git-fixes).\n- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).\n- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).\n- Revert \"Input: rmi4 - fix register descriptor address calculation\" (stable-fixes).\n- sctp: validate embedded address parameter length (git-fixes).\n- security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() (git-fixes).\n- selftests: Disable dad for ipv6 in fcnal-test.sh (bsc#1272871).\n- selftests: Replace sleep with slowwait (bsc#1272871).\n- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).\n- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).\n- serial: 8250_omap: clear rx_running on zero-length DMA completes (git-fixes).\n- serial: msm: Disable DMA for kernel console UART (git-fixes).\n- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).\n- soc: fsl: qe: panic on ioremap() failure in qe_reset() (git-fixes).\n- soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy (git-fixes).\n- soc: xilinx: Shutdown and free rx mailbox channel (git-fixes).\n- spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure (git-fixes).\n- spi: sh-msiof: abort transfers when reset times out (git-fixes).\n- staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() (git-fixes).\n- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).\n- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).\n- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).\n- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB write in HT_caps_handler() (git-fixes).\n- staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (git-fixes).\n- thermal: core: Free thermal zone ID later during removal (git-fixes).\n- time: Switch to hrtimer_setup() (bsc#1271912).\n- tpm: Make the TPM character devices non-seekable (git-fixes).\n- uio_hv_generic: Bind to FCopy device by default (git-fixes).\n- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).\n- usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() (git-fixes).\n- USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (git-fixes).\n- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).\n- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).\n- usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() (git-fixes).\n- usb: dwc3: run gadget disconnect from sleepable suspend context (git-fixes).\n- usb: free iso schedules on failed submit (git-fixes).\n- usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (git-fixes).\n- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).\n- usb: gadget: f_fs: Fix DMA fence leak (git-fixes).\n- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).\n- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).\n- usb: gadget: f_printer: take kref only for successful open (git-fixes).\n- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: function: rndis: add length check for header (stable-fixes).\n- usb: gadget: function: rndis: add length check to response query (stable-fixes).\n- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).\n- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).\n- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).\n- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).\n- USB: idmouse: fix use-after-free on disconnect race (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).\n- usb: iowarrior: remove inherent race with minor number (stable-fixes).\n- USB: ldusb: fix use-after-free on disconnect race (git-fixes).\n- USB: legousbtower: fix use-after-free on disconnect race (git-fixes).\n- USB: misc: uss720: unregister parport on probe failure (git-fixes).\n- usb: mtu3: unmap request DMA on queue failure (git-fixes).\n- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).\n- USB: serial: digi_acceleport: fix broken rx after throttle (git-fixes).\n- USB: serial: digi_acceleport: fix hard lockup on disconnect (git-fixes).\n- USB: serial: digi_acceleport: fix write buffer corruption (git-fixes).\n- USB: serial: io_edgeport: cap received transmit credits (git-fixes).\n- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).\n- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).\n- USB: serial: keyspan_pda: fix information leak (git-fixes).\n- USB: serial: mxuport: validate firmware header size (git-fixes).\n- USB: serial: option: add MeiG SRM813Q (stable-fixes).\n- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).\n- usb: sl811-hcd: disable controller wakeup on remove (git-fixes).\n- USB: storage: include US_FL_NO_SAME in quirks mask (git-fixes).\n- usb: typec: anx7411: use devm_pm_runtime_enable() (git-fixes).\n- usb: typec: class: drop PD lookup reference (git-fixes).\n- usb: typec: tcpm: Fix VDM type for Enter Mode commands (git-fixes).\n- usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (git-fixes).\n- usb: typec: ucsi: cancel pending work on system suspend (git-fixes).\n- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove (git-fixes).\n- usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware (git-fixes).\n- usb: typec: ucsi: Invert DisplayPort role assignment (git-fixes).\n- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode (git-fixes).\n- USB: ulpi: fix memory leak on registration failure (git-fixes).\n- USB: usb-storage: ene_ub6250: restore media-ready check (git-fixes).\n- usb: xhci: Fix sleep in atomic context in xhci_free_streams() (git-fixes).\n- usbip: tools: support SuperSpeedPlus devices (git-fixes).\n- usbip: vudc: fix NULL deref in vep_dequeue() (git-fixes).\n- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).\n- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).\n- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).\n- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).\n- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (git-fixes).\n- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).\n- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).\n- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).\n- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).\n- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).\n- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).\n- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).\n- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).\n- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).\n- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).\n- wifi: mac80211: tear down new links on vif update error path (git-fixes).\n- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).\n- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).\n- wifi: mt76: Disable napi when removing device (git-fixes).\n- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).\n- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: fix crash in reset link replay (git-fixes).\n- wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() (git-fixes).\n- wifi: mt76: mt7925: guard link STA in decap offload (git-fixes).\n- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).\n- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).\n- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).\n- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).\n- wifi: mwifiex: fix roaming to different channel in host_mlme mode (git-fixes).\n- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).\n- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).\n- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).\n- xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).\n- xfs: only assert new size for datafork during truncate extents (bsc#1264084).\n- xfs: rearrange code in xfs_inode_item_precommit (bsc#1237449).\n- xfs: rework datasync tracking and execution (bsc#1237449).\n- xhci: dbgtty: fix device unregister (git-fixes).\n- xhci: dbgtty: fix device unregister: fixup (git-fixes).\n","status":"published","published":"2026-08-11T21:26:34Z","modified":"2026-08-27T18:23:10.279362294Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23237-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).\n- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).\n- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).\n- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).\n- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).\n- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).\n- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).\n- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).\n- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).\n- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).\n- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).\n- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).\n- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).\n- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).\n- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).\n- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).\n- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).\n- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).\n- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).\n- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).\n- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).\n- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).\n- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).\n- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).\n- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).\n- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).\n- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).\n- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).\n- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).\n- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).\n- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).\n- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).\n- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).\n- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).\n- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).\n- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).\n- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).\n- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).\n- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).\n- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).\n- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).\n- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).\n- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).\n- CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).\n- CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).\n- CVE-2026-46036: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470).\n- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).\n- CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).\n- CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).\n- CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).\n- CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).\n- CVE-2026-46089: zram: do not forget to endio for partial discard requests (bsc#1267445).\n- CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).\n- CVE-2026-46121: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (bsc#1266932).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46130: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629).\n- CVE-2026-46132: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (bsc#1267616).\n- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).\n- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).\n- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).\n- CVE-2026-46170: mptcp: disable add_addr retransmission when timeout is 0 (bsc#1267714).\n- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).\n- CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).\n- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).\n- CVE-2026-46207: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).\n- CVE-2026-46216: drm/xe/hdcp: Add NULL check for media_gt in (bsc#1267234).\n- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).\n- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).\n- CVE-2026-46249: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683).\n- CVE-2026-46265: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).\n- CVE-2026-46287: net: txgbe: fix RTNL assertion warning when remove module (bsc#1267954).\n- CVE-2026-46292: pmdomain: core: Fix detach procedure for virtual devices in genpd (bsc#1267943).\n- CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (bsc#1267986).\n- CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).\n- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).\n- CVE-2026-46327: dm: fix unlocked test for dm_suspended_md (bsc#1268031).\n- CVE-2026-46329: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038).\n- CVE-2026-52913: batman-adv: v: stop OGMv2 on disabled interface (bsc#1268985).\n- CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).\n- CVE-2026-52916: batman-adv: frag: disallow unicast fragment in fragment (bsc#1269002).\n- CVE-2026-52921: netfilter: ipset: stop hash:* range iteration at end (bsc#1269024).\n- CVE-2026-52922: batman-adv: dat: handle forward allocation error (bsc#1269030).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52926: batman-adv: clear current gateway during teardown (bsc#1269025).\n- CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).\n- CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).\n- CVE-2026-52934: batman-adv: tvlv: reject oversized TVLV packets (bsc#1268994).\n- CVE-2026-52937: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (bsc#1268983).\n- CVE-2026-52941: net/smc: avoid NULL deref of conn-\u003elnk in smc_msg_event tracepoint (bsc#1268966).\n- CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).\n- CVE-2026-52947: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (bsc#1269115).\n- CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access (bsc#1269133).\n- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).\n- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).\n- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).\n- CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval (bsc#1269229).\n- CVE-2026-52974: net: tls: fix strparser anchor skb leak on offload RX setup failure (bsc#1269233).\n- CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).\n- CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).\n- CVE-2026-52988: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (bsc#1269362).\n- CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).\n- CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).\n- CVE-2026-52999: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (bsc#1269119).\n- CVE-2026-53000: netfilter: nat: use kfree_rcu to release ops (bsc#1269117).\n- CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).\n- CVE-2026-53003: pppoe: drop PFC frames (bsc#1269111).\n- CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).\n- CVE-2026-53005: af_unix: Drop all SCM attributes for SOCKMAP (bsc#1269107).\n- CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).\n- CVE-2026-53009: ice: fix double-free of tx_buf skb (bsc#1269098).\n- CVE-2026-53011: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (bsc#1269094).\n- CVE-2026-53012: nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1269154).\n- CVE-2026-53013: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (bsc#1269095).\n- CVE-2026-53014: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir\n  (bsc#1269092).\n- CVE-2026-53032: bpf: Fix NULL deref in map_kptr_match_type for scalar regs (bsc#1269138).\n- CVE-2026-53035: bpf, sockmap: Fix af_unix iter deadlock (bsc#1269190).\n- CVE-2026-53038: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).\n- CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).\n- CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).\n- CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).\n- CVE-2026-53069: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).\n- CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (bsc#1269688).\n- CVE-2026-53083: bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1269964).\n- CVE-2026-53085: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).\n- CVE-2026-53088: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1269185).\n- CVE-2026-53101: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (bsc#1269415).\n- CVE-2026-53104: wifi: mt76: Fix memory leak destroying device (bsc#1269157).\n- CVE-2026-53106: bpf: Do not allow deleting local storage in NMI (bsc#1269990).\n- CVE-2026-53107: wifi: libertas: use USB anchors for tracking in-flight URBs (bsc#1269991).\n- CVE-2026-53121: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (bsc#1269198).\n- CVE-2026-53123: md: wake raid456 reshape waiters before suspend (bsc#1269643).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53132: vsock/virtio: fix potential unbounded skb queue (bsc#1269290).\n- CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).\n- CVE-2026-53157: net: phonet: free phonet_device after RCU grace period (bsc#1269241).\n- CVE-2026-53175: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).\n- CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).\n- CVE-2026-53183: mptcp: allow subflow rcv wnd to shrink (bsc#1269376).\n- CVE-2026-53184: udp: clear skb-\u003edev before running a sockmap verdict (bsc#1269689).\n- CVE-2026-53185: zram: fix use-after-free in zram_bvec_write_partial() (bsc#1269660).\n- CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).\n- CVE-2026-53189: mm/huge_memory: update file PMD counter before folio_put() (bsc#1269797).\n- CVE-2026-53210: tee: shm: fix shm leak in register_shm_helper() (bsc#1269727).\n- CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy (bsc#1269672).\n- CVE-2026-53214: ipv6: Fix a potential NPD in cleanup_prefix_route() (bsc#1269588).\n- CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).\n- CVE-2026-53221: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (bsc#1269318).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).\n- CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).\n- CVE-2026-53230: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (bsc#1269270).\n- CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269801).\n- CVE-2026-53235: net: add pskb_may_pull() to skb_gro_receive_list() (bsc#1269286).\n- CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).\n- CVE-2026-53239: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (bsc#1269677).\n- CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (bsc#1269235).\n- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).\n- CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev() (bsc#1269307).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).\n- CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).\n- CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).\n- CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs() (bsc#1269694).\n- CVE-2026-53321: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).\n- CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).\n- CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).\n- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).\n- CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).\n- CVE-2026-53393: nfsd: reset write verifier on deferred writeback errors (bsc#1271858).\n- CVE-2026-53394: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race (bsc#1271859).\n- CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).\n- CVE-2026-53398: NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1271870).\n- CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).\n- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).\n- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).\n- CVE-2026-63809: bpf: NUL-terminate replaced sysctl value (bsc#1272296).\n- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).\n- CVE-2026-63831: mac802154: llsec: add skb_cow_data() before in-place crypto (bsc#1272184).\n- CVE-2026-63836: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (bsc#1272246).\n- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).\n- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).\n- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).\n- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).\n- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).\n- CVE-2026-64025: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).\n- CVE-2026-64061: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).\n- CVE-2026-64091: batman-adv: tt: fix TOCTOU race for reported vlans (bsc#1272514).\n- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).\n- CVE-2026-64157: netfs: Fix partial invalidation of streaming-write folio (bsc#1272462).\n- CVE-2026-64158: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).\n- CVE-2026-64187: xfs: fail recovery on a committed log item with no regions (bsc#1272204).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).\n- CVE-2026-64357: xfs: fix exchmaps reservation limit check (bsc#1272612).\n- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).\n- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (bsc#1273231).\n- CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Fix wrong register read in LNL failure diagnostics (git-fixes).\n- accel/ivpu: Reject firmware log with size smaller than header (git-fixes).\n- ALSA: hda: codecs: hdmi: disable keep-alive before audio format change (git-fixes).\n- ALSA: hda: conexant: Remove mic bias threshold override (git-fixes).\n- ALSA: hda: cs35l41: validate and free ACPI mute object (git-fixes).\n- ALSA: hda: Fix cached processing coefficient verbs (git-fixes).\n- ALSA: lx6464es: fix period byte count for 16-bit streams (git-fixes).\n- ALSA: pcm: wake linked drain waiters on unlink (git-fixes).\n- ALSA: scarlett2: Allow selecting config_set by firmware version (stable-fixes).\n- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (git-fixes).\n- ALSA: seq: close a re-opened queue timer in the destructor (git-fixes).\n- ALSA: seq: Fix division by zero in initialize_timer() (git-fixes).\n- ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (git-fixes).\n- ALSA: timer: don't re-enter an instance callback that is still running (git-fixes).\n- ALSA: timer: drain a slave's callback before its master detaches it (git-fixes).\n- ALSA: ump: fix double free of out_cvts on rawmidi error (git-fixes).\n- ALSA: usb-audio: Clamp frame size in implicit-feedback mode (git-fixes).\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (git-fixes).\n- ALSA: usb-audio: fix stack info leak in RME Digiface status (git-fixes).\n- ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (git-fixes).\n- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC (git-fixes).\n- apparmor: fix use-after-free in rawdata dedup loop (git-fixes).\n- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (git-fixes).\n- ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() (git-fixes).\n- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI (git-fixes).\n- ASoC: cs35l56: Fix potential probe() deadlock (git-fixes).\n- ASoC: cs35l56: Use complete_all() to signal init_completion (git-fixes).\n- ASoC: cs42l43: Correct report for forced microphone jack (git-fixes).\n- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP (git-fixes).\n- ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup (git-fixes).\n- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop (git-fixes).\n- ASoC: tas2562: fix broken entries in the volume lookup table (git-fixes).\n- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup (git-fixes).\n- ASoC: tas2562: fix DVC coefficient write order (git-fixes).\n- ASoC: tas2781: bound firmware description string parsing (git-fixes).\n- assoc_array: trim the final shortcut word using the current chunk end (git-fixes).\n- batman-adv: bla: reacquire gw address after skb realloc (git-fixes).\n- batman-adv: dat: ensure accessible eth_hdr proto field (git-fixes).\n- batman-adv: dat: fix tie-break for candidate selection (git-fixes).\n- batman-adv: fix batadv_skb_is_frag() kernel-doc (git-fixes).\n- batman-adv: fix VLAN priority offset (git-fixes).\n- batman-adv: frag: fix primary_if leak on failed linearization (git-fixes).\n- batman-adv: frag: free unfragmentable packet (git-fixes).\n- batman-adv: mcast: avoid OOB read of num_dests header (git-fixes).\n- batman-adv: tt: avoid request storms during pending request (git-fixes).\n- batman-adv: tt: prevent TVLV OOB check overflow (git-fixes).\n- bitops: use common function parameter names (git-fixes).\n- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (stable-fixes).\n- Bluetooth: 6lowpan: Fix using chan-\u003econn as indication to no remote netdev (git-fixes).\n- Bluetooth: btintel: Validate length before parsing diagnostics TLV (git-fixes).\n- Bluetooth: btrtl: validate firmware patch bounds (git-fixes).\n- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB (stable-fixes).\n- Bluetooth: btusb: validate Realtek vendor event length (git-fixes).\n- Bluetooth: hci_qca: Clear memdump state on invalid dump size (git-fixes).\n- Bluetooth: hci_sync: Fix advertising data UAFs (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback (git-fixes).\n- Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback (git-fixes).\n- Bluetooth: hci_sync: Protect UUID list traversal (git-fixes).\n- Bluetooth: HIDP: reject frames without a transaction header (git-fixes).\n- Bluetooth: HIDP: validate numbered report payloads (git-fixes).\n- Bluetooth: ISO: clear iso_data always when detaching conn from hcon (git-fixes).\n- Bluetooth: ISO: fix CONNECTED -\u003e CLOSED transition on shutdown/release (git-fixes).\n- Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos (git-fixes).\n- Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() (git-fixes).\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (git-fixes).\n- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (git-fixes).\n- Bluetooth: mgmt: Translate HCI reason in Device Disconnected event (git-fixes).\n- Bluetooth: RFCOMM: Fix session UAF in set_termios (git-fixes).\n- Bluetooth: SCO: give the socket its own sco_conn reference (git-fixes).\n- btrfs: do not trim a device which is not writeable (bsc#1272568).\n- bus: sunxi-rsb: Always check register address validity (git-fixes).\n- can: bcm: add missing rcu list annotations and operations (git-fixes).\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (git-fixes).\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure (git-fixes).\n- can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured (git-fixes).\n- can: ctucanfd: add missing MODULE_DEVICE_TABLE() (git-fixes).\n- can: ctucanfd: handle bus error interrupts (git-fixes).\n- can: ctucanfd: mark error-active controller status valid (git-fixes).\n- can: ctucanfd: unmap BAR0 using base address (git-fixes).\n- can: ctucanfd: use self-test mode for PRESUME_ACK (git-fixes).\n- can: ems_usb: validate CPC message lengths (git-fixes).\n- can: esd_usb: kill anchored URBs before freeing netdevs (git-fixes).\n- can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure (git-fixes).\n- can: isotp: check register_netdevice_notifier() error in module init (git-fixes).\n- can: isotp: use unconditional synchronize_rcu() in isotp_release() (git-fixes).\n- can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (git-fixes).\n- can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() (git-fixes).\n- can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (git-fixes).\n- can: peak_usb: add bounds check for USB channel index (git-fixes).\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (git-fixes).\n- can: peak_usb: validate uCAN receive record lengths (git-fixes).\n- can: softing: fw_parse(): validate firmware record spans (git-fixes).\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (git-fixes).\n- comedi: comedi_parport: deal with premature interrupt (git-fixes).\n- crypto/xxhash: set downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: introduce downstream CRYPTO_ALG_FIPS_UNAPPROVED (bsc#1262160 jsc#PED-15986).\n- crypto: qat - keep VFs enabled during reset (stable-fixes).\n- crypto: qat - notify fatal error before AER reset preparation (stable-fixes).\n- dm cache policy smq: check allocation under invalidate lock (git-fixes).\n- dm cache: fix missing return in invalidate_committed's error path (git-fixes).\n- dmaengine: idxd: fix double free of wq, engine, and group structs (git-fixes).\n- dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (git-fixes).\n- dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ (git-fixes).\n- dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA (git-fixes).\n- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() (git-fixes).\n- driver core: Guard deferred probe timeout extension with delayed_work_pending() (git-fixes).\n- driver core: Use mod_delayed_work to prevent lost deferred probe work (git-fixes).\n- Drivers: hv: vmbus: Set DMA coherent mask for VMBus devices (git-fixes).\n- drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference (git-fixes).\n- drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips (git-fixes).\n- drm/amd/display: set new_stream to NULL after release (git-fixes).\n- drm/amd/display: use proper context for logging (git-fixes).\n- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) (git-fixes).\n- drm/amd/pm: fix amdgpu_pm_info power display units (git-fixes).\n- drm/amd/pm: fix smu13 power limit range calculation (git-fixes).\n- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge (git-fixes).\n- drm/amdgpu: fix aperture mapping leak (git-fixes).\n- drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment (git-fixes).\n- drm/amdkfd: free MQD managers on DQM init failures (git-fixes).\n- drm/amdkfd: hold event_mutex while checkpointing CRIU events (git-fixes).\n- drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs (git-fixes).\n- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() (git-fixes).\n- drm/gfx10: Program DB_RING_CONTROL (git-fixes).\n- drm/i915/bios: range check LFP Data Block panel_type2 (git-fixes).\n- drm/i915/gem: Do not leak siblings[] on proto context error (git-fixes).\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU (git-fixes).\n- drm/i915/gt: use correct selftest config symbol (git-fixes).\n- drm/i915/selftests: Fix GT PM sort comparators (git-fixes).\n- drm/i915: ensure segment offset never exceeds allowed max (stable-fixes).\n- drm/i915: Return NULL on error in active_instance (git-fixes).\n- drm/imagination: acquire vm_ctx-\u003elock before mapping memory to GPU VM (git-fixes).\n- drm/imagination: Fix double call to drm_sched_entity_fini() (git-fixes).\n- drm/imagination: fix error checking of pvr_vm_context_lookup() (git-fixes).\n- drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY (git-fixes).\n- drm/imagination: Fix user array stride in pvr_set_uobj_array() (git-fixes).\n- drm/mediatek: Check CRTC state before freeing (git-fixes).\n- drm/mediatek: ovl_adaptor: balance component registrations (git-fixes).\n- drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() (git-fixes).\n- drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced (git-fixes).\n- drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() (git-fixes).\n- drm/panthor: Interrupt group start/resumption if group_bind_locked() fails (git-fixes).\n- drm/panthor: reject firmware sections with oversized data (git-fixes).\n- drm/panthor: return error on truncated firmware (git-fixes).\n- drm/panthor: validate firmware interface structure sizes (git-fixes).\n- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove (git-fixes).\n- drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered (stable-fixes).\n- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem (git-fixes).\n- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup (git-fixes).\n- drm/vc4: hvs/v3d: Fix null dereference in unbind (git-fixes).\n- drm/vc4: Prevent shader BO mappings from becoming writable (git-fixes).\n- drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (git-fixes).\n- drm/vc4: Zero the tile state data array before each BIN job (git-fixes).\n- drm/virtio: bound EDID block reads to the response buffer (git-fixes).\n- drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker (git-fixes).\n- drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure (git-fixes).\n- drm/vmwgfx: bound DMA command body size against suffix pointer (git-fixes).\n- drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (git-fixes).\n- drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (git-fixes).\n- drm/vmwgfx: reject DX_BIND_QUERY without a DX context (git-fixes).\n- drm/vmwgfx: use check_add_overflow for shader size+offset bound (git-fixes).\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (git-fixes).\n- drm/vmwgfx: validate external BO copy bounds for both stride paths (git-fixes).\n- drm/vmwgfx: Validate vmw_surface_metadata::array_size (git-fixes).\n- drm/xe/hw_engine: Fix double-free of managed BO in error path (git-fixes).\n- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays (git-fixes).\n- drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() (git-fixes).\n- drm/xe/wopcm: fix WOPCM size for LNL+ (git-fixes).\n- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds (git-fixes).\n- drm/xe: remove duplicate \u003ckunit/test-bug.h\u003e include (git-fixes).\n- erofs: set fileio bio failed in short read case (git-fixes).\n- fbcon: fix NULL pointer dereference for a console without vc_data (stable-fixes).\n- fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() (git-fixes).\n- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() (git-fixes).\n- fbdev: efifb: fix memory leak in efifb_probe() (git-fixes).\n- fbdev: hecubafb: fix potential memory leak in hecubafb_probe() (git-fixes).\n- fbdev: i740fb: fix potential memory leak in i740fb_probe() (git-fixes).\n- fbdev: metronomefb: fix potential memory leak in metronomefb_probe() (git-fixes).\n- fbdev: nvidia: fix potential memory leak in nvidiafb_probe() (git-fixes).\n- fbdev: radeon: fix potential memory leak in radeonfb_pci_register() (git-fixes).\n- fbdev: s3fb: fix potential memory leak in s3_pci_probe() (git-fixes).\n- fbdev: sm501fb: Fix buffer errors in OF binding code (git-fixes).\n- fbdev: sm712: Fix operator precedence in big_swap macro (git-fixes).\n- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() (git-fixes).\n- fbdev: tridentfb: fix potential memory leak in trident_pci_probe() (git-fixes).\n- fbdev: uvesafb: fix potential memory leak in uvesafb_probe() (git-fixes).\n- fbdev: vesafb: fix memory leak in vesafb_probe() (git-fixes).\n- firewire: net: Fix fragmented datagram reassembly (git-fixes).\n- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (git-fixes).\n- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (git-fixes).\n- gpio-f7188x: Add support for NCT6126D version B (git-fixes).\n- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure (git-fixes).\n- gpio: eic-sprd: use raw_spinlock_t in the irq startup path (git-fixes).\n- gpio: htc-egpio: use managed gpiochip registration (git-fixes).\n- gpio: mlxbf3: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: fail probe if gpiochip registration fails (git-fixes).\n- gpio: mvebu: free generic chips on unbind (git-fixes).\n- gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (git-fixes).\n- gpio: rockchip: change the GPIO version judgment logic (stable-fixes).\n- gpio: rockchip: fix generic IRQ chip leak on remove (git-fixes).\n- gpio: rockchip: teardown bugs and resource leaks (git-fixes).\n- gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() (git-fixes).\n- gpio: tegra: do not call pinctrl for GPIO direction (git-fixes).\n- gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- gpios: palmas: add .get_direction() op (git-fixes).\n- HID: add haptics page defines (stable-fixes).\n- HID: hid-sjoy: race between init and usage (git-fixes).\n- HID: pidff: Add missing spaces (stable-fixes).\n- HID: pidff: Fix missing blank lines after declarations (stable-fixes).\n- HID: playstation: validate num_touch_reports in DualShock 4 reports (stable-fixes).\n- hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (git-fixes).\n- hwmon: (adt7470) Fix cache updated before hardware write on I2C error (git-fixes).\n- hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (git-fixes).\n- hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors (git-fixes).\n- hwmon: (adt7470) Fix PWM auto temp state array and bounds check (git-fixes).\n- hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks (git-fixes).\n- hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() (git-fixes).\n- hwmon: (adt7470) Use cached PWM frequency value (git-fixes).\n- hwmon: (asus-ec-sensors) add missed handle for ENOMEM (git-fixes).\n- hwmon: (asus-ec-sensors) fix EC read intervals (git-fixes).\n- hwmon: (asus-ec-sensors) fix looping over banks while reading from EC (git-fixes).\n- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (lm90) Only report alarms if driver is ready (git-fixes).\n- hwmon: (ltc4282) Fix reading the minimum alarm voltage (git-fixes).\n- hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (git-fixes).\n- hwmon: (nct6775-core) Prevent access to unsupported weight registers (git-fixes).\n- hwmon: (npcm750-pwm-fan): stop fan timer on device detach (git-fixes).\n- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (nzxt-smart2) DMA-align output buffer (git-fixes).\n- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop (git-fixes).\n- hwmon: (pmbus) Fix return value from pmbus_update_byte_data() (git-fixes).\n- hwmon: (pmbus/core) notify on the hwmon device, not the i2c client (git-fixes).\n- hwmon: (sht3x) Fix unaligned accesses (git-fixes).\n- hwmon: (w83627hf) remove VID sysfs files on error and remove (stable-fixes).\n- hwmon: (w83793) remove vrm sysfs file on probe failure (stable-fixes).\n- hwmon: occ: validate poll response sensor blocks (git-fixes).\n- i2c: amd-mp2: Unregister callback on adapter add failure (git-fixes).\n- i2c: imx: Cancel hrtimer before clearing slave pointer (git-fixes).\n- i2c: imx: Fix slave registration race and error handling (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (git-fixes).\n- i2c: mediatek: fix WRRD for SoCs without auto_restart option (git-fixes).\n- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() (git-fixes).\n- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (git-fixes).\n- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring (git-fixes).\n- ieee802154: admin-gate legacy LLSEC dump operations (git-fixes).\n- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation (git-fixes).\n- ieee802154: ca8210: fix cas_ctl leak on spi_async failure (git-fixes).\n- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit (git-fixes).\n- ieee802154: fix kernel-infoleak in dgram_recvmsg() (git-fixes).\n- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() (git-fixes).\n- iio: accel: bmc150: clamp the device-reported FIFO frame count (git-fixes).\n- iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (git-fixes).\n- iio: adc: lpc32xx: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: spear: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: ti-ads124s08: Return reset GPIO lookup errors (git-fixes).\n- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable (git-fixes).\n- iio: common: st_sensors: honour channel endianness in read_axis_data (git-fixes).\n- iio: event: Fix event FIFO reset race (git-fixes).\n- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ (git-fixes).\n- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ (git-fixes).\n- iio: imu: inv_icm42600: fix timestamp clock period by using lower value (git-fixes).\n- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading (git-fixes).\n- iio: imu: st_lsm6dsx: deselect shub page before reading whoami (git-fixes).\n- iio: light: al3010: fix incorrect scale for the highest gain range (git-fixes).\n- iio: light: gp2ap002: fix runtime PM leak on read error (git-fixes).\n- iio: light: tsl2591: return actual error from probe IRQ failure (git-fixes).\n- iio: magnetometer: ak8975: fix potential kernel stack memory leak (git-fixes).\n- iio: temperature: Build mlx90635 with CONFIG_MLX90635 (git-fixes).\n- Input: ads7846 - restore half-duplex support (git-fixes).\n- Input: atkbd - validate scancode in firmware keymap entries (git-fixes).\n- Input: elan_i2c - prevent division by zero and arithmetic underflow (git-fixes).\n- Input: goodix - clamp the device-reported contact count (git-fixes).\n- Input: iforce - bound the device-reported force-feedback effect index (git-fixes).\n- Input: ims-pcu - add response length checks (git-fixes).\n- Input: ims-pcu - fix DMA mapping violation in line setup (git-fixes).\n- Input: ims-pcu - fix firmware leak in async update (git-fixes).\n- Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() (git-fixes).\n- Input: ims-pcu - fix logic error in packet reset (git-fixes).\n- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging (git-fixes).\n- Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix race condition in reset_device sysfs callback (git-fixes).\n- Input: ims-pcu - fix type confusion in CDC union descriptor parsing (git-fixes).\n- Input: ims-pcu - fix use-after-free and double-free in disconnect (git-fixes).\n- Input: ims-pcu - only expose sysfs attributes on control interface (git-fixes).\n- Input: ims-pcu - release data interface on disconnect (git-fixes).\n- Input: ims-pcu - validate control endpoint type (git-fixes).\n- Input: maple_keyb - set driver data before registering input device (stable-fixes).\n- Input: maplecontrol - set driver data before registering input device (stable-fixes).\n- Input: maplemouse - fix NULL pointer dereference in open() (git-fixes).\n- Input: maplemouse - set driver data before registering input device (stable-fixes).\n- Input: mms114 - fix multi-touch slot corruption (git-fixes).\n- Input: mms114 - fix touch indexing for MMS134S and MMS136 (git-fixes).\n- Input: mms114 - reject an oversized device packet size (git-fixes).\n- Input: rmi4 - fix bit count in bitmap_copy() (git-fixes).\n- Input: rmi4 - fix limit in rmi_register_desc_has_subpacket() (git-fixes).\n- Input: rmi4 - fix memory leak in rmi_set_attn_data() (git-fixes).\n- Input: rmi4 - fix num_subpackets overflow in register descriptor (git-fixes).\n- Input: rmi4 - fix register descriptor address calculation (git-fixes).\n- Input: rmi4 - fix type overflow in register counts (git-fixes).\n- Input: rmi4 - initialize attn_fifo properly (stable-fixes).\n- Input: rmi4 - iterative IRQ handler (git-fixes).\n- Input: rmi4 - refactor F12 probe function (stable-fixes).\n- Input: rmi4 - refactor function allocation and registration (stable-fixes).\n- Input: rmi4 - refactor register descriptor parsing (git-fixes).\n- Input: rmi4 - tolerate short register descriptor structure (git-fixes).\n- Input: rmi4 - use local presence map in rmi_read_register_desc() (stable-fixes).\n- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (git-fixes).\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (git-fixes).\n- Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure (git-fixes).\n- Input: touchwin - reset the packet index on every complete packet (git-fixes).\n- intel_th: core: fix null pointer dereference in intel_th_irq (bsc#1248480).\n- intel_th: fix MSC output device reference leak (git-fixes).\n- io_uring/kbuf: don't truncate end buffer for bundles (bsc#1271290).\n- io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF (bsc#1261250).\n- io_uring/kbuf: flag partial buffer mappings (bsc#1271290).\n- io_uring/kbuf: propagate BUF_MORE through early buffer commit path (bsc#1261250).\n- io_uring/net: always use current transfer count for buffer put (git-fixes).\n- io_uring/net: improve recv bundles (bsc#1271290).\n- io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries (bsc#1271290).\n- io_uring/net: only consider msg_inq if larger than 1 (git-fixes).\n- io_uring/net: only retry recv bundle for a full transfer (bsc#1271290).\n- io_uring/timeout: add helper for parsing user time (bsc#1271291).\n- io_uring/timeout: honour caller's time namespace for IORING_TIMEOUT_ABS (bsc#1271291).\n- io_uring/timeout: migrate reqs from ts64 to ktime (bsc#1271291).\n- io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER (bsc#1271291).\n- ixgbe: reduce number of reads when getting OROM data (bsc#1269637).\n- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT (git-fixes).\n- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (git-fixes).\n- KVM: nSVM: Clear tracking of L1-\u003eL2 NMI and soft IRQ on nested #VMEXIT (git-fixes).\n- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (git-fixes).\n- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (git-fixes).\n- KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs (git-fixes).\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (git-fixes).\n- KVM: TDX: Reject concurrent change to CPUID entry count (git-fixes).\n- KVM: x86/mmu: Check write tracking in all address spaces (git-fixes).\n- KVM: x86/mmu: Fix use-after-free on vendor module reload (git-fixes).\n- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (git-fixes).\n- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (git-fixes).\n- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN (git-fixes).\n- leds: uleds: Fix potential buffer overread (git-fixes).\n- mac802154: hold an interface reference across the scan worker (git-fixes).\n- mac802154: llsec: reject frames shorter than the authentication tag (git-fixes).\n- mac802154: Prevent overwrite return code in mac802154_perform_association() (git-fixes).\n- mac802154: remove interfaces with RCU list deletion (git-fixes).\n- mailbox: zynqmp: setup IPI for each valid child node (bsc#1271395).\n- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (bsc#1266694).\n- media: aspeed: fix missing of_reserved_mem_device_release() on probe failure (git-fixes).\n- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() (git-fixes).\n- media: atomisp: gc2235: fix UAF and memory leak (git-fixes).\n- media: cec: seco: unregister adapter on IR probe failure (git-fixes).\n- media: cedrus: Fix failure to clean up hardware on probe failure (git-fixes).\n- media: cedrus: Fix missing cleanup in error path (git-fixes).\n- media: cedrus: skip invalid H.264 reference list entries (git-fixes).\n- media: marvell-cam: fix missing pci_disable_device() on remove (git-fixes).\n- media: mtk-jpeg: cancel workqueue on release for supported platforms only (git-fixes).\n- media: nxp: imx8-isi: Fix use-after-free on remove (git-fixes).\n- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code (stable-fixes).\n- media: pci: dm1105: Free allocated workqueue (git-fixes).\n- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite (git-fixes).\n- media: qcom: venus: drop extra padding in NV12 raw size calculation (git-fixes).\n- media: qcom: venus: relax encoder frame/blur dimension steps on v4 (git-fixes).\n- media: qcom: venus: relax encoder frame/blur step size on v6 (git-fixes).\n- media: rockchip: rga: fix too small buffer size (git-fixes).\n- media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe (git-fixes).\n- media: ti: vpe: unwind v4l2 device registration on probe error (git-fixes).\n- media: uvcvideo: Avoid partial metadata buffers (git-fixes).\n- media: uvcvideo: Do not add clock samples with small sof delta (git-fixes).\n- media: uvcvideo: Fix buffer sequence in frame gaps (git-fixes).\n- media: uvcvideo: Fix dev_sof filtering in hw timestamp (git-fixes).\n- media: uvcvideo: Fix sequence number when no EOF (git-fixes).\n- media: uvcvideo: Relax the constrains for interpolating the hw clock (git-fixes).\n- media: uvcvideo: Use hw timestaming if the clock buffer is full (git-fixes).\n- media: v4l2-common: Add YUV24 format info (git-fixes).\n- media: v4l2-ctrls: validate HEVC active reference counts (git-fixes).\n- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (git-fixes).\n- media: vidtv: fix reference leak on failed device registration (git-fixes).\n- media: vimc: fix reference leak on failed device registration (git-fixes).\n- media: vpif_capture: fix OF node reference imbalance (git-fixes).\n- mei: bus: access mei_device under device_lock on cleanup (git-fixes).\n- memory: tegra: Wire up system sleep PM ops (git-fixes).\n- memstick: ms_block: reject a card that reports too many blocks (git-fixes).\n- mfd: cros_ec: Delay dev_set_drvdata() until probe success (git-fixes).\n- mfd: cs42l43: Sanity check firmware size (git-fixes).\n- mfd: rsmu: Fix page register setup (git-fixes).\n- mfd: sm501: Fix reference leak on failed device registration (git-fixes).\n- mfd: tps6586x: Fix OF node refcount (git-fixes).\n- misc: nsm: only unlock nsm_dev on post-lock error paths (git-fixes).\n- misc: nsm: pin the module while the device is open (git-fixes).\n- mkspec-dtb: Skip missing DTBs.\n- mm: zero range of eof folio exposed by inode size extension (bsc#1272920).\n- mmc: block: fix RPMB device unregister ordering (git-fixes).\n- mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method (git-fixes).\n- mmc: vub300: defer reset until cmd_mutex is unlocked (git-fixes).\n- mshv: fix hv_input_get_system_property struct (git-fixes).\n- mtd: mchp23k256: use SPI match data for chip caps (git-fixes).\n- mtd: onenand: samsung: report DMA completion timeouts (git-fixes).\n- mtd: rawnand: fsl_ifc: return errors for failed page reads (git-fixes).\n- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout (git-fixes).\n- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout (git-fixes).\n- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (bsc#1271866).\n- net/x25: fix use-after-free in x25_kill_by_neigh() (git-fixes).\n- net: mana: Add Interrupt Moderation support (bsc#1271368).\n- net: mana: Return error code from mana_create_rxq() (git-fixes).\n- net: mctp i2c: Copy headers if cloned (bsc#1266694).\n- net: mctp-i2c: fix duplicate reception of old data (bsc#1266694).\n- net: thunderbolt: Fix frags overflow by bounding frame_count (git-fixes).\n- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (git-fixes).\n- net: usb: lan78xx: move functions to avoid forward definitions (stable-fixes).\n- net: wwan: t7xx: check skb_clone in control TX (git-fixes).\n- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure (git-fixes).\n- netfs: Defer the emission of trace_netfs_folio() (git-fixes).\n- of: cpu: add check in __of_find_n_match_cpu_property() (git-fixes).\n- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (git-fixes).\n- phy: phy-can-transceiver: Check driver match and driver data against NULL (git-fixes).\n- phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask (git-fixes).\n- phy: zynqmp: fix runtime PM leak on probe allocation failure (git-fixes).\n- phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB (git-fixes).\n- phy: zynqmp: use read-modify-write for SERDES scrambler bypass (git-fixes).\n- pinctrl-amd: Don't clear S4 wake bits at probe (git-fixes).\n- pinctrl: bm1880: add missing select GENERIC_PINCONF (git-fixes).\n- pinctrl: cs42l43: Fix polarity on debounce (git-fixes).\n- pinctrl: devicetree: don't free uninitialized dev_name on error path (git-fixes).\n- pinctrl: equilibrium: fix warning trace on load (git-fixes).\n- pinctrl: equilibrium: rename irq_chip function callbacks (stable-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: meson: restore non-sleeping GPIO access (git-fixes).\n- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table (git-fixes).\n- pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 (git-fixes).\n- pinctrl: qcom: Unconditionally mark gpio as wakeup enable (git-fixes).\n- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path (git-fixes).\n- pkspec-dtb: Fix dtb-al rename.\n- platform/x86/amd/pmc: Add delay_suspend module parameter (stable-fixes).\n- platform/x86/amd/pmc: Avoid logging \"(null)\" for DMI values (git-fixes).\n- platform/x86/amd/pmc: Check for intermediate wakeup in function (stable-fixes).\n- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops (stable-fixes).\n- platform/x86/amd/pmc: Don't log during intermediate wakeups (stable-fixes).\n- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (git-fixes).\n- posix-cpu-timers: Cleanup the firing logic (bsc#1271912).\n- posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).\n- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1271912).\n- posix-timers: Add proper state tracking (bsc#1271912).\n- posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).\n- posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).\n- power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() (git-fixes).\n- power: supply: bq25890: fix the -10 C NTC lookup entry (git-fixes).\n- power: supply: max17040: handle missing status supplier (git-fixes).\n- RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).\n- regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (git-fixes).\n- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets (git-fixes).\n- regulator: mt6358: use regmap helper to read fixed LDO calibration (git-fixes).\n- remoteproc: qcom: Fix leak when custom dump_segments addition fails (git-fixes).\n- reset: sunxi: fix memory region leak on ioremap failure (git-fixes).\n- Revert \"Input: rmi4 - fix register descriptor address calculation\" (stable-fixes).\n- sctp: validate embedded address parameter length (git-fixes).\n- security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() (git-fixes).\n- selftests: Disable dad for ipv6 in fcnal-test.sh (bsc#1272871).\n- selftests: Replace sleep with slowwait (bsc#1272871).\n- serial: 8250_mid: Disable DMA for selected platforms (git-fixes).\n- serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (git-fixes).\n- serial: 8250_omap: clear rx_running on zero-length DMA completes (git-fixes).\n- serial: msm: Disable DMA for kernel console UART (git-fixes).\n- serial: sc16is7xx: implement gpio get_direction() callback (git-fixes).\n- soc: fsl: qe: panic on ioremap() failure in qe_reset() (git-fixes).\n- soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy (git-fixes).\n- soc: xilinx: Shutdown and free rx mailbox channel (git-fixes).\n- spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure (git-fixes).\n- spi: sh-msiof: abort transfers when reset times out (git-fixes).\n- staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() (git-fixes).\n- staging: media: atomisp: reduce load_primary_binaries() stack usage (git-fixes).\n- staging: rtl8723bs: core: move constants to right side in comparison (stable-fixes).\n- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix inverted HT40 secondary channel offset (git-fixes).\n- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB write in HT_caps_handler() (git-fixes).\n- staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (git-fixes).\n- thermal: core: Free thermal zone ID later during removal (git-fixes).\n- time: Switch to hrtimer_setup() (bsc#1271912).\n- tpm: Make the TPM character devices non-seekable (git-fixes).\n- uio_hv_generic: Bind to FCopy device by default (git-fixes).\n- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (stable-fixes).\n- usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() (git-fixes).\n- USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (git-fixes).\n- usb: chipidea: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub (stable-fixes).\n- usb: core: port: Deattach Type-C connector on component unbind (git-fixes).\n- usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() (git-fixes).\n- usb: dwc3: run gadget disconnect from sleepable suspend context (git-fixes).\n- usb: free iso schedules on failed submit (git-fixes).\n- usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (git-fixes).\n- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback (git-fixes).\n- usb: gadget: f_fs: Fix DMA fence leak (git-fixes).\n- usb: gadget: f_midi: cancel pending IN work before freeing the midi object (git-fixes).\n- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() (git-fixes).\n- usb: gadget: f_printer: take kref only for successful open (git-fixes).\n- USB: gadget: fsl-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: function: rndis: add length check for header (stable-fixes).\n- usb: gadget: function: rndis: add length check to response query (stable-fixes).\n- usb: gadget: printer: fix infinite loop in printer_read() (git-fixes).\n- USB: gadget: snps-udc: fix device name leak on probe failure (git-fixes).\n- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown (git-fixes).\n- usb: gadget: udc: Fix use-after-free in gadget_match_driver (stable-fixes).\n- usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer (git-fixes).\n- USB: idmouse: fix use-after-free on disconnect race (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect race (git-fixes).\n- usb: iowarrior: remove inherent race with minor number (stable-fixes).\n- USB: ldusb: fix use-after-free on disconnect race (git-fixes).\n- USB: legousbtower: fix use-after-free on disconnect race (git-fixes).\n- USB: misc: uss720: unregister parport on probe failure (git-fixes).\n- usb: mtu3: unmap request DMA on queue failure (git-fixes).\n- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD (stable-fixes).\n- USB: serial: digi_acceleport: fix broken rx after throttle (git-fixes).\n- USB: serial: digi_acceleport: fix hard lockup on disconnect (git-fixes).\n- USB: serial: digi_acceleport: fix write buffer corruption (git-fixes).\n- USB: serial: io_edgeport: cap received transmit credits (git-fixes).\n- USB: serial: io_ti: reject oversized boot-mode firmware (git-fixes).\n- USB: serial: keyspan_pda: fix data loss on receive throttling (git-fixes).\n- USB: serial: keyspan_pda: fix information leak (git-fixes).\n- USB: serial: mxuport: validate firmware header size (git-fixes).\n- USB: serial: option: add MeiG SRM813Q (stable-fixes).\n- USB: serial: option: add Telit Cinterion FE990D50 compositions (stable-fixes).\n- usb: sl811-hcd: disable controller wakeup on remove (git-fixes).\n- USB: storage: include US_FL_NO_SAME in quirks mask (git-fixes).\n- usb: typec: anx7411: use devm_pm_runtime_enable() (git-fixes).\n- usb: typec: class: drop PD lookup reference (git-fixes).\n- usb: typec: tcpm: Fix VDM type for Enter Mode commands (git-fixes).\n- usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (git-fixes).\n- usb: typec: ucsi: cancel pending work on system suspend (git-fixes).\n- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove (git-fixes).\n- usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware (git-fixes).\n- usb: typec: ucsi: Invert DisplayPort role assignment (git-fixes).\n- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode (git-fixes).\n- USB: ulpi: fix memory leak on registration failure (git-fixes).\n- USB: usb-storage: ene_ub6250: restore media-ready check (git-fixes).\n- usb: xhci: Fix sleep in atomic context in xhci_free_streams() (git-fixes).\n- usbip: tools: support SuperSpeedPlus devices (git-fixes).\n- usbip: vudc: fix NULL deref in vep_dequeue() (git-fixes).\n- wan: wanxl: Only reset hardware after BAR mapping (git-fixes).\n- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (git-fixes).\n- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() (git-fixes).\n- wifi: ath6kl: fix OOB access from firmware ADDBA window size (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware IE lengths in connect event (git-fixes).\n- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler (git-fixes).\n- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (git-fixes).\n- wifi: ath10k: fix skb leak on incomplete msdu during rx pop (git-fixes).\n- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin (git-fixes).\n- wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() (git-fixes).\n- wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET (git-fixes).\n- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning (git-fixes).\n- wifi: brcmfmac: make release_scratchbuffers idempotent (git-fixes).\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (git-fixes).\n- wifi: carl9170: fix buffer overflow in rx_stream failover path (git-fixes).\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler (git-fixes).\n- wifi: iwlwifi: mvm: fix read in wake packet notification handler (git-fixes).\n- wifi: iwlwifi: mvm: validate SAR GEO response payload size (git-fixes).\n- wifi: mac80211: fix memory leak in ieee80211_register_hw() (git-fixes).\n- wifi: mac80211: free ack status frame on TX header build failure (git-fixes).\n- wifi: mac80211: recalculate TIM when a station enters power save (git-fixes).\n- wifi: mac80211: tear down new links on vif update error path (git-fixes).\n- wifi: mac80211: validate individual TWT params before driver setup (git-fixes).\n- wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() (git-fixes).\n- wifi: mt76: Disable napi when removing device (git-fixes).\n- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7915: guard HE capability lookups (git-fixes).\n- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (git-fixes).\n- wifi: mt76: mt7925: fix crash in reset link replay (git-fixes).\n- wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() (git-fixes).\n- wifi: mt76: mt7925: guard link STA in decap offload (git-fixes).\n- wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() (git-fixes).\n- wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() (git-fixes).\n- wifi: mwifiex: bound uAP association event IEs to the event buffer (git-fixes).\n- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (git-fixes).\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations (git-fixes).\n- wifi: mwifiex: fix roaming to different channel in host_mlme mode (git-fixes).\n- wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (git-fixes).\n- wifi: rt2x00: avoid full teardown before work setup in probe (git-fixes).\n- wifi: wilc1000: validate assoc response length before subtracting header (git-fixes).\n- xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267).\n- xfs: only assert new size for datafork during truncate extents (bsc#1264084).\n- xfs: rearrange code in xfs_inode_item_precommit (bsc#1237449).\n- xfs: rework datasync tracking and execution (bsc#1237449).\n- xhci: dbgtty: fix device unregister (git-fixes).\n- xhci: dbgtty: fix device unregister: fixup (git-fixes).\n","status":"published","published":"2026-08-11T21:34:22Z","modified":"2026-08-27T18:23:10.81084318Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23477-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T12:54:32Z","modified":"2026-09-14T18:23:16.721468657Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23481-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731) \t  \n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T13:00:49Z","modified":"2026-09-14T18:23:13.340667208Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23528-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T10:34:26Z","modified":"2026-09-15T18:23:09.824440367Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:23529-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731) \t  \n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T11:00:17Z","modified":"2026-09-15T18:23:09.921123083Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4120-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43014: net: macb: properly unregister fixed rate clocks (bsc#1264012).\n- CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53142: drm/xe/display: fix oops in suspend/shutdown without display (bsc#1269402).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53180: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53263: 6lowpan: fix off-by-one in multicast context address compression (bsc#1269647).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63995: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033).\n- CVE-2026-63996: ethtool: cmis: require exact CDB reply length (bsc#1273032).\n- CVE-2026-63997: ethtool: module: avoid leaking a netdev ref on module flash errors (bsc#1273036).\n- CVE-2026-63998: ethtool: module: call ethnl_ops_complete() on module flash errors (bsc#1273037).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64033: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64055: net: ethernet: cortina: Drop half-assembled SKB (bsc#1272893).\n- CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64099: drm/v3d: Fix use-after-free of CPU job query arrays on error path (bsc#1273465).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64136: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (bsc#1272351).\n- CVE-2026-64146: erofs: fix metabuf leak in inode xattr initialization (bsc#1273681).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64180: mm/memory_hotplug: fix memory block reference leak on remove (bsc#1273679).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64224: octeontx2-pf: fix double free in rvu_rep_rsrc_init() (bsc#1272804).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64244: drivers/base/memory: set mem-\u003ealtmap after successful device registration (bsc#1273812).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64269: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg (bsc#1273280).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64452: 6lowpan: fix NHC entry use-after-free on error path (bsc#1273460).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64477: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (bsc#1274264).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64515: wifi: mac80211: fix MLE defragmentation (bsc#1273859).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64569: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n (bsc#1274009).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68105: drm/amdgpu: Fix kernel panic during driver load failure (bsc#1274849).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68124: mctp: serial: handle zero-length frames to prevent rx buffer overflow (bsc#1275192).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68135: net: hip04: fix RX buffer leak on build_skb failure (bsc#1275557).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68152: amt: fix use-after-free in AMT delayed works (bsc#1275300).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68267: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (bsc#1275139).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68302: amt: re-read skb header pointers after every pull (bsc#1275081).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68375: bnxt_en: Handle partially initialized auxiliary devices (bsc#1274835).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72032: net/mlx5: HWS, fix matcher leak on resize target setup failure (bsc#1276955).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72046: gve: fix header buffer corruption with header-split and HW-GRO (bsc#1275519).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72497: RDMA/bnxt_re: Add a max slot check for SQ (bsc#1276913).\n- CVE-2026-72498: RDMA/bnxt_re: Avoid displaying the kernel pointer (bsc#1276912).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72500: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown (bsc#1276552).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74577: net: mpls: initialize rtm_tos in mpls_getroute() (bsc#1275572).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74712: vdpa/mlx5: Fix buffer length in create_direct_keys() (bsc#1276577).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: APEI: Fix ERST timeout unit conversion (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: control: Don't add invalid kcontrols to LED layer (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: scarlett2: Use a private URB for the notification endpoint (git-fixes).\n- ALSA: seq: Don't leak the extension cell pointer in the bounce payload (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- arm64: Exclude nohz_full CPUs from 32bits el0 support (bsc#1269313).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- ASoC: hdac_hda: Fix hlink refcount leak on component registration failure (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1017-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtk: Do not discard the subsystem reset timeout (git-fixes).\n- Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() (stable-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378 (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: fix the SCO setup context lifetime (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bnxt_en: Adjust TX rings if reservation is less than requested (jsc#PED-16798).\n- bnxt_en: Delay for 5 seconds after AER DPC for all chips (jsc#PED-16798).\n- bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() (jsc#PED-16798).\n- bnxt_en: Drop pci_save_state() after pci_restore_state() (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction for V3_CMP (jsc#PED-16798).\n- bnxt_en: Move bnxt_rss_ext_op into header (jsc#PED-16798).\n- bnxt_en: Refactor some basic ring setup and adjustment logic (jsc#PED-16798).\n- bnxt_en: Restore default stat ctxs for ULP when resource is available (jsc#PED-16798).\n- bnxt_en: Set bp-\u003emax_tpa according to what the FW supports (jsc#PED-16798).\n- bnxt_en: Use absolute target ns from ptp_clock_request (jsc#PED-16798).\n- bnxt_en: use bnxt_xdp_buff for xdp context (jsc#PED-16798).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use CPPC to get scaling factors (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use HYBRID_SCALING_FACTOR_ADL for Bartlett Lake (bsc#1240957 bsc#1249104 bsc#1265220).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: Add AV mute wait frames to dce110_set_avmute (stable-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/display: Check for tg ops in dce110_set_avmute (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE (git-fixes).\n- drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() (git-fixes).\n- drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames (stable-fixes).\n- drm/amd/display: Remove unused-but-set variable hubp from (git-fixes).\n- drm/amd/display: validate plane degamma LUT size for private color prop (git-fixes).\n- drm/amd/pm: adjust the visibility of pp_table sysfs node (stable-fixes).\n- drm/amd/pm: Use same metric table for APU (stable-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: fix nbif 6.3.1 l1 low power not functional (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini (git-fixes).\n- drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12 (git-fixes).\n- drm/amdgpu: reject oversized IBs with per-ring packet limits (stable-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: remove unused function parameter (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore (git-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector/hdmi: Fix out of bounds memory read (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/i915/hdcp: check streams bounds before overflow (git-fixes).\n- drm/i915/hdcp: Move to using intel_display in intel_hdcp (stable-fixes).\n- drm/i915/hdcp: require monotonically increasing seq_num_v (git-fixes).\n- drm/i915/hdcp: Skip inactive MST connectors when building stream list (stable-fixes).\n- drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() (stable-fixes).\n- drm/i915/vrr: require valid min/max vfreq for VRR (git-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/a6xx: Fix RBBM_CLOCK_CNTL3_TP0 value in a730_hwcg (git-fixes).\n- drm/msm/a6xx: Fix stale rpmh votes after suspend (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/panthor: fix firmware control interface bounds checks (git-fixes).\n- drm/panthor: return PTR_ERR() from devm_drm_dev_alloc() (git-fixes).\n- drm/panthor: skip zero-sized firmware sections (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates in ssd133x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: hdmi: Don't leak sync polarity bits into packet control (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm/xe/oa: Check managed mutex initialization errors (git-fixes).\n- drm/xe/oa: Fix sync entry leak on OA config emit failure (git-fixes).\n- drm/xe: Introduce xe_gt_dbg_printer() (stable-fixes).\n- drm/xe: Order ring writes before ring tail updates (git-fixes).\n- drm/xe: Stub out new pagefault layer (stable-fixes).\n- drm/xe: tests: fix error message in xe_migrate_sanity_test() (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: core: fix debugfs UAF on adapter removal (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: Fix potential UAF in i3c_device_uevent() (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- kthread: Default affine kthread to its preferred NUMA node (bsc#1269313).\n- kthread: Make sure kthread hasn't started while binding it (bsc#1269313).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: PPC: Book3S HV: Add support for compat CPU capabilities for KVM on PowerNV (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Implement compat CPU capability retrieval for KVM on PowerVM (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode (bsc#1263864 ltc#217835).\n- KVM: PPC: Document KVM_PPC_GET_COMPAT_CAPS ioctl (bsc#1263864 ltc#217835).\n- KVM: PPC: Introduce KVM_CAP_PPC_COMPAT_CAPS and wire up ioctl (bsc#1263864 ltc#217835).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: amphion: Remove obsolete frame_count check in venc_start_session (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: imx219: Rename VTS to FRM_LENGTH (stable-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: i2c: rdacm21: Fix missing media_entity_cleanup() (git-fixes).\n- media: imx219: Fix maximum frame length in lines (git-fixes).\n- media: intel/ipu6: fix async notifier cleanup leak on parse error (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-async: avoid deleting unlinked ASC entry on link error (git-fixes).\n- media: v4l2-async: Unregister sub-device if asc_list is empty (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- mm: Create/affine kcompactd to its preferred node (bsc#1269313).\n- mm: Create/affine kswapd to its preferred node (bsc#1269313).\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86/amd/hsmp: Reject negative power cap writes in hwmon (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS (git-fixes).\n- platform/x86: hp-bioscfg: advance elem past consumed array elements (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read on empty password write (git-fixes).\n- platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password (git-fixes).\n- platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() (git-fixes).\n- platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed (git-fixes).\n- platform/x86: hp-bioscfg: fix password encoding bounds check (git-fixes).\n- platform/x86: hp-bioscfg: warn on element type mismatch instead of failing (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Add a NULL check for sst_inst (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Return error during profile addition (git-fixes).\n- platform/x86: ISST: Use PP level enable mask (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate parameter for core power state (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors (bsc#1263864 ltc#217835).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (bsc#1263864 ltc#217835).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (bsc#1263864 ltc#217835).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert 'drm/amdgpu: fix aperture mapping leak' (git-fixes).\n- Revert 'media: v4l2-dev: fix error handling in __video_register_device()' (git-fixes).\n- Revert 'thermal/drivers/hwmon: Cleanup coding style a bit' (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- sched,arm64: Handle CPU isolation on last resort fallback rq (bsc#1269313).\n- scsi: fnic: Abort timed-out NVMe LS requests (bsc#1236344).\n- scsi: fnic: Add FDLS role handling for NVMe initiators (bsc#1236344).\n- scsi: fnic: Add the NVMe/FC transport path (bsc#1236344).\n- scsi: fnic: Advertise NVMe initiator service parameters (bsc#1236344).\n- scsi: fnic: Bump up version number (bsc#1236344).\n- scsi: fnic: Decode firmware role configuration (bsc#1236344).\n- scsi: fnic: Do not use GFP_ZERO for mempools (bsc#1236344).\n- scsi: fnic: Expose NVMe transport state in debugfs (bsc#1236344).\n- scsi: fnic: Handle NVMe LS frames in FDLS (bsc#1236344).\n- scsi: fnic: Make debug logging protocol independent (bsc#1236344).\n- scsi: fnic: Make fnic_queuecommand() easier to analyze (bsc#1236344).\n- scsi: fnic: Refactor in_remove flag and call to fnic_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Remove a useless struct mempool forward declaration (bsc#1236344).\n- scsi: fnic: Rename fnic_scsi_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Route completions and resets by initiator role (bsc#1236344).\n- scsi: fnic: Self-assignment of intr_time_type has no effect (bsc#1236344).\n- scsi: fnic: Send NVMe LS requests through FDLS (bsc#1236344).\n- scsi: fnic: Switch to use %ptSp (bsc#1236344).\n- scsi: fnic: Track NVMe transport statistics (bsc#1236344).\n- scsi: fnic: Use fnic_num for non-SCSI identifiers (bsc#1236344).\n- scsi: fnic: Use mempool for receive frames (bsc#1236344).\n- scsi: qla2xxx: Declare qla2xxx_mqueuecommand() static (bsc#1275737).\n- scsi: qla2xxx: Use nr_cpu_ids instead of NR_CPUS for qp_cpu_map allocation (bsc#1275737).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: fix of_node_put() on VIP parse errors (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: Fix bandwidth group reservation indexing (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uaccess: add copy_struct_to_user helper (bsc#1263864 ltc#217835).\n- uaccess: fix ignored_trailing logic in copy_struct_to_user() (bsc#1263864 ltc#217835).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive() (git-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: disconnect on CSA to channel 0 (git-fixes).\n- wifi: mac80211: fix multi-link element inheritance (git-fixes).\n- wifi: mac80211: fix per-STA profile length in cross-link CSA parsing (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (bsc#1240957 bsc#1249104 bsc#1265220).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-10T09:31:34Z","modified":"2026-09-14T18:23:14.868358938Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4254-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53142: drm/xe/display: fix oops in suspend/shutdown without display (bsc#1269402).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53180: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53263: 6lowpan: fix off-by-one in multicast context address compression (bsc#1269647).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63995: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033).\n- CVE-2026-63996: ethtool: cmis: require exact CDB reply length (bsc#1273032).\n- CVE-2026-63997: ethtool: module: avoid leaking a netdev ref on module flash errors (bsc#1273036).\n- CVE-2026-63998: ethtool: module: call ethnl_ops_complete() on module flash errors (bsc#1273037).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64033: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64055,CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893).\n- CVE-2026-64055: net: ethernet: cortina: Drop half-assembled SKB (bsc#1272893).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64099: drm/v3d: Fix use-after-free of CPU job query arrays on error path (bsc#1273465).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64136: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (bsc#1272351).\n- CVE-2026-64146: erofs: fix metabuf leak in inode xattr initialization (bsc#1273681).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64180: mm/memory_hotplug: fix memory block reference leak on remove (bsc#1273679).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64224: octeontx2-pf: fix double free in rvu_rep_rsrc_init() (bsc#1272804).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64244: drivers/base/memory: set mem-\u003ealtmap after successful device registration (bsc#1273812).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64269: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg (bsc#1273280).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64452: 6lowpan: fix NHC entry use-after-free on error path (bsc#1273460).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64477: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (bsc#1274264).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64515: wifi: mac80211: fix MLE defragmentation (bsc#1273859).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64569: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n (bsc#1274009).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68105: drm/amdgpu: Fix kernel panic during driver load failure (bsc#1274849).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68124: mctp: serial: handle zero-length frames to prevent rx buffer overflow (bsc#1275192).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68135: net: hip04: fix RX buffer leak on build_skb failure (bsc#1275557).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68152: amt: fix use-after-free in AMT delayed works (bsc#1275300).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68267: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (bsc#1275139).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68302: amt: re-read skb header pointers after every pull (bsc#1275081).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68375: bnxt_en: Handle partially initialized auxiliary devices (bsc#1274835).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72032: net/mlx5: HWS, fix matcher leak on resize target setup failure (bsc#1276955).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72046: gve: fix header buffer corruption with header-split and HW-GRO (bsc#1275519).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72497: RDMA/bnxt_re: Add a max slot check for SQ (bsc#1276913).\n- CVE-2026-72498: RDMA/bnxt_re: Avoid displaying the kernel pointer (bsc#1276912).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72500: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown (bsc#1276552).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74577: net: mpls: initialize rtm_tos in mpls_getroute() (bsc#1275572).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74712: vdpa/mlx5: Fix buffer length in create_direct_keys() (bsc#1276577).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n- CVE-2026-90082: net: mana: Cap MSI-X vectors to the device MSI-X table size \n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: APEI: Fix ERST timeout unit conversion (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: control: Don't add invalid kcontrols to LED layer (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: scarlett2: Use a private URB for the notification endpoint (git-fixes).\n- ALSA: seq: Don't leak the extension cell pointer in the bounce payload (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- arm64: Exclude nohz_full CPUs from 32bits el0 support (bsc#1269313).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- ASoC: hdac_hda: Fix hlink refcount leak on component registration failure (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1017-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtk: Do not discard the subsystem reset timeout (git-fixes).\n- Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() (stable-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378 (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: fix the SCO setup context lifetime (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bnxt_en: Adjust TX rings if reservation is less than requested (jsc#PED-16798).\n- bnxt_en: Delay for 5 seconds after AER DPC for all chips (jsc#PED-16798).\n- bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() (jsc#PED-16798).\n- bnxt_en: Drop pci_save_state() after pci_restore_state() (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction for V3_CMP (jsc#PED-16798).\n- bnxt_en: Move bnxt_rss_ext_op into header (jsc#PED-16798).\n- bnxt_en: Refactor some basic ring setup and adjustment logic (jsc#PED-16798).\n- bnxt_en: Restore default stat ctxs for ULP when resource is available (jsc#PED-16798).\n- bnxt_en: Set bp-\u003emax_tpa according to what the FW supports (jsc#PED-16798).\n- bnxt_en: Use absolute target ns from ptp_clock_request (jsc#PED-16798).\n- bnxt_en: use bnxt_xdp_buff for xdp context (jsc#PED-16798).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use CPPC to get scaling factors (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use HYBRID_SCALING_FACTOR_ADL for Bartlett Lake (bsc#1240957 bsc#1249104 bsc#1265220).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: Add AV mute wait frames to dce110_set_avmute (stable-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/display: Check for tg ops in dce110_set_avmute (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE (git-fixes).\n- drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() (git-fixes).\n- drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames (stable-fixes).\n- drm/amd/display: Remove unused-but-set variable hubp from (git-fixes).\n- drm/amd/display: validate plane degamma LUT size for private color prop (git-fixes).\n- drm/amd/pm: adjust the visibility of pp_table sysfs node (stable-fixes).\n- drm/amd/pm: Use same metric table for APU (stable-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: fix nbif 6.3.1 l1 low power not functional (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini (git-fixes).\n- drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12 (git-fixes).\n- drm/amdgpu: reject oversized IBs with per-ring packet limits (stable-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: remove unused function parameter (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore (git-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector/hdmi: Fix out of bounds memory read (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/i915/hdcp: check streams bounds before overflow (git-fixes).\n- drm/i915/hdcp: Move to using intel_display in intel_hdcp (stable-fixes).\n- drm/i915/hdcp: require monotonically increasing seq_num_v (git-fixes).\n- drm/i915/hdcp: Skip inactive MST connectors when building stream list (stable-fixes).\n- drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() (stable-fixes).\n- drm/i915/vrr: require valid min/max vfreq for VRR (git-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/a6xx: Fix RBBM_CLOCK_CNTL3_TP0 value in a730_hwcg (git-fixes).\n- drm/msm/a6xx: Fix stale rpmh votes after suspend (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/panthor: fix firmware control interface bounds checks (git-fixes).\n- drm/panthor: return PTR_ERR() from devm_drm_dev_alloc() (git-fixes).\n- drm/panthor: skip zero-sized firmware sections (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates in ssd133x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: hdmi: Don't leak sync polarity bits into packet control (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm/xe/oa: Check managed mutex initialization errors (git-fixes).\n- drm/xe/oa: Fix sync entry leak on OA config emit failure (git-fixes).\n- drm/xe: Introduce xe_gt_dbg_printer() (stable-fixes).\n- drm/xe: Order ring writes before ring tail updates (git-fixes).\n- drm/xe: Stub out new pagefault layer (stable-fixes).\n- drm/xe: tests: fix error message in xe_migrate_sanity_test() (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: core: fix debugfs UAF on adapter removal (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: Fix potential UAF in i3c_device_uevent() (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- kthread: Default affine kthread to its preferred NUMA node (bsc#1269313).\n- kthread: Make sure kthread hasn't started while binding it (bsc#1269313).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: PPC: Book3S HV: Add support for compat CPU capabilities for KVM on PowerNV (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Implement compat CPU capability retrieval for KVM on PowerVM (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode (bsc#1263864 ltc#217835).\n- KVM: PPC: Document KVM_PPC_GET_COMPAT_CAPS ioctl (bsc#1263864 ltc#217835).\n- KVM: PPC: Introduce KVM_CAP_PPC_COMPAT_CAPS and wire up ioctl (bsc#1263864 ltc#217835).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: amphion: Remove obsolete frame_count check in venc_start_session (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: imx219: Rename VTS to FRM_LENGTH (stable-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: i2c: rdacm21: Fix missing media_entity_cleanup() (git-fixes).\n- media: imx219: Fix maximum frame length in lines (git-fixes).\n- media: intel/ipu6: fix async notifier cleanup leak on parse error (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-async: avoid deleting unlinked ASC entry on link error (git-fixes).\n- media: v4l2-async: Unregister sub-device if asc_list is empty (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- mm: Create/affine kcompactd to its preferred node (bsc#1269313).\n- mm: Create/affine kswapd to its preferred node (bsc#1269313).\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86/amd/hsmp: Reject negative power cap writes in hwmon (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS (git-fixes).\n- platform/x86: hp-bioscfg: advance elem past consumed array elements (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read on empty password write (git-fixes).\n- platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password (git-fixes).\n- platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() (git-fixes).\n- platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed (git-fixes).\n- platform/x86: hp-bioscfg: fix password encoding bounds check (git-fixes).\n- platform/x86: hp-bioscfg: warn on element type mismatch instead of failing (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Add a NULL check for sst_inst (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Return error during profile addition (git-fixes).\n- platform/x86: ISST: Use PP level enable mask (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate parameter for core power state (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors (bsc#1263864 ltc#217835).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (bsc#1263864 ltc#217835).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (bsc#1263864 ltc#217835).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert 'drm/amdgpu: fix aperture mapping leak' (git-fixes).\n- Revert 'media: v4l2-dev: fix error handling in __video_register_device()' (git-fixes).\n- Revert 'thermal/drivers/hwmon: Cleanup coding style a bit' (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- sched,arm64: Handle CPU isolation on last resort fallback rq (bsc#1269313).\n- scsi: fnic: Abort timed-out NVMe LS requests (bsc#1236344).\n- scsi: fnic: Add FDLS role handling for NVMe initiators (bsc#1236344).\n- scsi: fnic: Add the NVMe/FC transport path (bsc#1236344).\n- scsi: fnic: Advertise NVMe initiator service parameters (bsc#1236344).\n- scsi: fnic: Bump up version number (bsc#1236344).\n- scsi: fnic: Decode firmware role configuration (bsc#1236344).\n- scsi: fnic: Do not use GFP_ZERO for mempools (bsc#1236344).\n- scsi: fnic: Expose NVMe transport state in debugfs (bsc#1236344).\n- scsi: fnic: Handle NVMe LS frames in FDLS (bsc#1236344).\n- scsi: fnic: Make debug logging protocol independent (bsc#1236344).\n- scsi: fnic: Make fnic_queuecommand() easier to analyze (bsc#1236344).\n- scsi: fnic: Refactor in_remove flag and call to fnic_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Remove a useless struct mempool forward declaration (bsc#1236344).\n- scsi: fnic: Rename fnic_scsi_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Route completions and resets by initiator role (bsc#1236344).\n- scsi: fnic: Self-assignment of intr_time_type has no effect (bsc#1236344).\n- scsi: fnic: Send NVMe LS requests through FDLS (bsc#1236344).\n- scsi: fnic: Switch to use %ptSp (bsc#1236344).\n- scsi: fnic: Track NVMe transport statistics (bsc#1236344).\n- scsi: fnic: Use fnic_num for non-SCSI identifiers (bsc#1236344).\n- scsi: fnic: Use mempool for receive frames (bsc#1236344).\n- scsi: qla2xxx: Declare qla2xxx_mqueuecommand() static (bsc#1275737).\n- scsi: qla2xxx: Use nr_cpu_ids instead of NR_CPUS for qp_cpu_map allocation (bsc#1275737).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: fix of_node_put() on VIP parse errors (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: Fix bandwidth group reservation indexing (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uaccess: add copy_struct_to_user helper (bsc#1263864 ltc#217835).\n- uaccess: fix ignored_trailing logic in copy_struct_to_user() (bsc#1263864 ltc#217835).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive() (git-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: disconnect on CSA to channel 0 (git-fixes).\n- wifi: mac80211: fix multi-link element inheritance (git-fixes).\n- wifi: mac80211: fix per-STA profile length in cross-link CSA parsing (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (bsc#1240957 bsc#1249104 bsc#1265220).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-10-07T22:31:36Z","modified":"2026-10-08T19:27:38.397282936Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8567-1","title":"linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31506, CVE-2026-31507, CVE-2026-31508,\nCVE-2026-31509, CVE-2026-31510, CVE-2026-31511, CVE-2026-31512,\nCVE-2026-31515, CVE-2026-31516, CVE-2026-31518, CVE-2026-31519,\nCVE-2026-31520, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,\nCVE-2026-31524, CVE-2026-31525, CVE-2026-31527, CVE-2026-31528,\nCVE-2026-31530, CVE-2026-31532, CVE-2026-31540, CVE-2026-31542,\nCVE-2026-31545, CVE-2026-31546, CVE-2026-31548, CVE-2026-31549,\nCVE-2026-31550, CVE-2026-31551, CVE-2026-31552, CVE-2026-31554,\nCVE-2026-31555, CVE-2026-31556, CVE-2026-31557, CVE-2026-31563,\nCVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31575,\nCVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,\nCVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584,\nCVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588,\nCVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596,\nCVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,\nCVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606,\nCVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613,\nCVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618,\nCVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,\nCVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628,\nCVE-2026-31629, CVE-2026-31634, CVE-2026-31638, CVE-2026-31639,\nCVE-2026-31642, CVE-2026-31645, CVE-2026-31646, CVE-2026-31648,\nCVE-2026-31651, CVE-2026-31655, CVE-2026-31656, CVE-2026-31658,\nCVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664,\nCVE-2026-31665, CVE-2026-31667, CVE-2026-31670, CVE-2026-31671,\nCVE-2026-31672, CVE-2026-31673, CVE-2026-31674, CVE-2026-31675,\nCVE-2026-31677, CVE-2026-31678, CVE-2026-31679, CVE-2026-31680,\nCVE-2026-31681, CVE-2026-31683, CVE-2026-31684, CVE-2026-31686,\nCVE-2026-31689, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696,\nCVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700,\nCVE-2026-31701, CVE-2026-31702, CVE-2026-31704, CVE-2026-31705,\nCVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709,\nCVE-2026-31711, CVE-2026-31712, CVE-2026-31714, CVE-2026-31715,\nCVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31722,\nCVE-2026-31723, CVE-2026-31724, CVE-2026-31725, CVE-2026-31726,\nCVE-2026-31728, CVE-2026-31729, CVE-2026-31730, CVE-2026-31731,\nCVE-2026-31737, CVE-2026-31738, CVE-2026-31740, CVE-2026-31741,\nCVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751,\nCVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756,\nCVE-2026-31758, CVE-2026-31759, CVE-2026-31761, CVE-2026-31762,\nCVE-2026-31763, CVE-2026-31767, CVE-2026-31768, CVE-2026-31770,\nCVE-2026-31772, CVE-2026-31773, CVE-2026-31778, CVE-2026-31779,\nCVE-2026-31780, CVE-2026-31781, CVE-2026-31788, CVE-2026-43007,\nCVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015,\nCVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019,\nCVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025,\nCVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030,\nCVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43040,\nCVE-2026-43041, CVE-2026-43043, CVE-2026-43044, CVE-2026-43046,\nCVE-2026-43047, CVE-2026-43049, CVE-2026-43050, CVE-2026-43051,\nCVE-2026-43052, CVE-2026-43054, CVE-2026-43056, CVE-2026-43057,\nCVE-2026-43058, CVE-2026-43059, CVE-2026-43060, CVE-2026-43061,\nCVE-2026-43062, CVE-2026-43064, CVE-2026-43065, CVE-2026-43066,\nCVE-2026-43068, CVE-2026-43069, CVE-2026-43072, CVE-2026-43073,\nCVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079,\nCVE-2026-43080, CVE-2026-43081, CVE-2026-43082, CVE-2026-43084,\nCVE-2026-43085, CVE-2026-43086, CVE-2026-43088, CVE-2026-43089,\nCVE-2026-43091, CVE-2026-43092, CVE-2026-43093, CVE-2026-43094,\nCVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104,\nCVE-2026-43105, CVE-2026-43107, CVE-2026-43109, CVE-2026-43110,\nCVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43119,\nCVE-2026-43120, CVE-2026-43129, CVE-2026-43162, CVE-2026-43245,\nCVE-2026-43252, CVE-2026-43265, CVE-2026-43281, CVE-2026-43324,\nCVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330,\nCVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,\nCVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43342,\nCVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43355,\nCVE-2026-43357, CVE-2026-43359, CVE-2026-43360, CVE-2026-43361,\nCVE-2026-43362, CVE-2026-43363, CVE-2026-43365, CVE-2026-43366,\nCVE-2026-43368, CVE-2026-43370, CVE-2026-43371, CVE-2026-43372,\nCVE-2026-43373, CVE-2026-43377, CVE-2026-43380, CVE-2026-43381,\nCVE-2026-43382, CVE-2026-43386, CVE-2026-43387, CVE-2026-43395,\nCVE-2026-43397, CVE-2026-43405, CVE-2026-43408, CVE-2026-43409,\nCVE-2026-43411, CVE-2026-43412, CVE-2026-43413, CVE-2026-43415,\nCVE-2026-43419, CVE-2026-43420, CVE-2026-43421, CVE-2026-43424,\nCVE-2026-43425, CVE-2026-43426, CVE-2026-43427, CVE-2026-43428,\nCVE-2026-43429, CVE-2026-43430, CVE-2026-43432, CVE-2026-43436,\nCVE-2026-43437, CVE-2026-43439, CVE-2026-43441, CVE-2026-43445,\nCVE-2026-43448, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451,\nCVE-2026-43452, CVE-2026-43453, CVE-2026-43455, CVE-2026-43456,\nCVE-2026-43457, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466,\nCVE-2026-43467, CVE-2026-43468, CVE-2026-43469, CVE-2026-43471,\nCVE-2026-43472, CVE-2026-43473, CVE-2026-43475, CVE-2026-43476,\nCVE-2026-43480, CVE-2026-43483, CVE-2026-43484, CVE-2026-43488,\nCVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43495,\nCVE-2026-43496, CVE-2026-43497, CVE-2026-43499, CVE-2026-43502,\nCVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-45855, CVE-2026-45858, CVE-2026-45899, CVE-2026-45911,\nCVE-2026-45920, CVE-2026-45924, CVE-2026-45942, CVE-2026-45943,\nCVE-2026-45956, CVE-2026-45958, CVE-2026-45985, CVE-2026-45986,\nCVE-2026-45987, CVE-2026-45989, CVE-2026-45991, CVE-2026-45994,\nCVE-2026-45996, CVE-2026-45997, CVE-2026-45999, CVE-2026-46002,\nCVE-2026-46003, CVE-2026-46004, CVE-2026-46005, CVE-2026-46006,\nCVE-2026-46007, CVE-2026-46009, CVE-2026-46011, CVE-2026-46012,\nCVE-2026-46015, CVE-2026-46016, CVE-2026-46018, CVE-2026-46019,\nCVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024,\nCVE-2026-46026, CVE-2026-46027, CVE-2026-46031, CVE-2026-46033,\nCVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46041,\nCVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049,\nCVE-2026-46050, CVE-2026-46051, CVE-2026-46052, CVE-2026-46053,\nCVE-2026-46056, CVE-2026-46058, CVE-2026-46061, CVE-2026-46062,\nCVE-2026-46063, CVE-2026-46064, CVE-2026-46065, CVE-2026-46068,\nCVE-2026-46069, CVE-2026-46070, CVE-2026-46072, CVE-2026-46073,\nCVE-2026-46075, CVE-2026-46076, CVE-2026-46077, CVE-2026-46078,\nCVE-2026-46079, CVE-2026-46080, CVE-2026-46082, CVE-2026-46083,\nCVE-2026-46084, CVE-2026-46086, CVE-2026-46088, CVE-2026-46089,\nCVE-2026-46090, CVE-2026-46091, CVE-2026-46092, CVE-2026-46094,\nCVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102,\nCVE-2026-46103, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108,\nCVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113,\nCVE-2026-46114, CVE-2026-46116, CVE-2026-46117, CVE-2026-46120,\nCVE-2026-46121, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124,\nCVE-2026-46125, CVE-2026-46126, CVE-2026-46127, CVE-2026-46128,\nCVE-2026-46129, CVE-2026-46131, CVE-2026-46132, CVE-2026-46133,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145,\nCVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151,\nCVE-2026-46152, CVE-2026-46157, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46163, CVE-2026-46164, CVE-2026-46167,\nCVE-2026-46168, CVE-2026-46169, CVE-2026-46172, CVE-2026-46173,\nCVE-2026-46174, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178,\nCVE-2026-46179, CVE-2026-46180, CVE-2026-46184, CVE-2026-46186,\nCVE-2026-46187, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46194, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207,\nCVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212,\nCVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220,\nCVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229,\nCVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233,\nCVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238,\nCVE-2026-46241, CVE-2026-46273, CVE-2026-46274, CVE-2026-46280,\nCVE-2026-46282, CVE-2026-46285, CVE-2026-46286, CVE-2026-46287,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294,\nCVE-2026-46296, CVE-2026-46299, CVE-2026-46301, CVE-2026-46303,\nCVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46312,\nCVE-2026-46314, CVE-2026-46319, CVE-2026-52911, CVE-2026-52920,\nCVE-2026-52925, CVE-2026-52933, CVE-2026-52936, CVE-2026-52951,\nCVE-2026-52954, CVE-2026-52955, CVE-2026-52957, CVE-2026-52958,\nCVE-2026-52961, CVE-2026-52962, CVE-2026-52963, CVE-2026-52964,\nCVE-2026-52967, CVE-2026-52968, CVE-2026-52969, CVE-2026-52970,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52977, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986,\nCVE-2026-52989, CVE-2026-52990, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52995, CVE-2026-52998, CVE-2026-52999, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53006,\nCVE-2026-53011, CVE-2026-53012, CVE-2026-53013, CVE-2026-53014,\nCVE-2026-53015, CVE-2026-53016, CVE-2026-53021, CVE-2026-53022,\nCVE-2026-53023, CVE-2026-53032, CVE-2026-53033, CVE-2026-53034,\nCVE-2026-53035, CVE-2026-53036, CVE-2026-53037, CVE-2026-53039,\nCVE-2026-53040, CVE-2026-53041, CVE-2026-53043, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53052, CVE-2026-53056, CVE-2026-53058,\nCVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062,\nCVE-2026-53063, CVE-2026-53064, CVE-2026-53065, CVE-2026-53066,\nCVE-2026-53068, CVE-2026-53069, CVE-2026-53071, CVE-2026-53072,\nCVE-2026-53073, CVE-2026-53074, CVE-2026-53075, CVE-2026-53076,\nCVE-2026-53077, CVE-2026-53082, CVE-2026-53083, CVE-2026-53084,\nCVE-2026-53085, CVE-2026-53086, CVE-2026-53088, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53096, CVE-2026-53097, CVE-2026-53098,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53115,\nCVE-2026-53117, CVE-2026-53122, CVE-2026-53123, CVE-2026-53126,\nCVE-2026-53128, CVE-2026-53130, CVE-2026-53279, CVE-2026-53287,\nCVE-2026-53289, CVE-2026-53291, CVE-2026-53293, CVE-2026-53294,\nCVE-2026-53295, CVE-2026-53296, CVE-2026-53303, CVE-2026-53304,\nCVE-2026-53306, CVE-2026-53309, CVE-2026-53314, CVE-2026-53320)\n","status":"published","published":"2026-07-20T15:36:35Z","modified":"2026-11-07T01:46:48.030854859Z","updated_at":"2026-11-07T01:56:38.538236Z"},{"id":"USN-8574-1","title":"linux-gcp-fips vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31506, CVE-2026-31507, CVE-2026-31508,\nCVE-2026-31509, CVE-2026-31510, CVE-2026-31511, CVE-2026-31512,\nCVE-2026-31515, CVE-2026-31516, CVE-2026-31518, CVE-2026-31519,\nCVE-2026-31520, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,\nCVE-2026-31524, CVE-2026-31525, CVE-2026-31527, CVE-2026-31528,\nCVE-2026-31530, CVE-2026-31532, CVE-2026-31540, CVE-2026-31542,\nCVE-2026-31545, CVE-2026-31546, CVE-2026-31548, CVE-2026-31549,\nCVE-2026-31550, CVE-2026-31551, CVE-2026-31552, CVE-2026-31554,\nCVE-2026-31555, CVE-2026-31556, CVE-2026-31557, CVE-2026-31563,\nCVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31575,\nCVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,\nCVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584,\nCVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588,\nCVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596,\nCVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,\nCVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606,\nCVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613,\nCVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618,\nCVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,\nCVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628,\nCVE-2026-31629, CVE-2026-31634, CVE-2026-31638, CVE-2026-31639,\nCVE-2026-31642, CVE-2026-31645, CVE-2026-31646, CVE-2026-31648,\nCVE-2026-31651, CVE-2026-31655, CVE-2026-31656, CVE-2026-31658,\nCVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664,\nCVE-2026-31665, CVE-2026-31667, CVE-2026-31670, CVE-2026-31671,\nCVE-2026-31672, CVE-2026-31673, CVE-2026-31674, CVE-2026-31675,\nCVE-2026-31677, CVE-2026-31678, CVE-2026-31679, CVE-2026-31680,\nCVE-2026-31681, CVE-2026-31683, CVE-2026-31684, CVE-2026-31686,\nCVE-2026-31689, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696,\nCVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700,\nCVE-2026-31701, CVE-2026-31702, CVE-2026-31704, CVE-2026-31705,\nCVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709,\nCVE-2026-31711, CVE-2026-31712, CVE-2026-31714, CVE-2026-31715,\nCVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31722,\nCVE-2026-31723, CVE-2026-31724, CVE-2026-31725, CVE-2026-31726,\nCVE-2026-31728, CVE-2026-31729, CVE-2026-31730, CVE-2026-31731,\nCVE-2026-31737, CVE-2026-31738, CVE-2026-31740, CVE-2026-31741,\nCVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751,\nCVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756,\nCVE-2026-31758, CVE-2026-31759, CVE-2026-31761, CVE-2026-31762,\nCVE-2026-31763, CVE-2026-31767, CVE-2026-31768, CVE-2026-31770,\nCVE-2026-31772, CVE-2026-31773, CVE-2026-31778, CVE-2026-31779,\nCVE-2026-31780, CVE-2026-31781, CVE-2026-31788, CVE-2026-43007,\nCVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015,\nCVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019,\nCVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025,\nCVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030,\nCVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43040,\nCVE-2026-43041, CVE-2026-43043, CVE-2026-43044, CVE-2026-43046,\nCVE-2026-43047, CVE-2026-43049, CVE-2026-43050, CVE-2026-43051,\nCVE-2026-43052, CVE-2026-43054, CVE-2026-43056, CVE-2026-43057,\nCVE-2026-43058, CVE-2026-43059, CVE-2026-43060, CVE-2026-43061,\nCVE-2026-43062, CVE-2026-43064, CVE-2026-43065, CVE-2026-43066,\nCVE-2026-43068, CVE-2026-43069, CVE-2026-43072, CVE-2026-43073,\nCVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079,\nCVE-2026-43080, CVE-2026-43081, CVE-2026-43082, CVE-2026-43084,\nCVE-2026-43085, CVE-2026-43086, CVE-2026-43088, CVE-2026-43089,\nCVE-2026-43091, CVE-2026-43092, CVE-2026-43093, CVE-2026-43094,\nCVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104,\nCVE-2026-43105, CVE-2026-43107, CVE-2026-43109, CVE-2026-43110,\nCVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43119,\nCVE-2026-43120, CVE-2026-43129, CVE-2026-43162, CVE-2026-43245,\nCVE-2026-43252, CVE-2026-43265, CVE-2026-43281, CVE-2026-43324,\nCVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330,\nCVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,\nCVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43342,\nCVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43355,\nCVE-2026-43357, CVE-2026-43359, CVE-2026-43360, CVE-2026-43361,\nCVE-2026-43362, CVE-2026-43363, CVE-2026-43365, CVE-2026-43366,\nCVE-2026-43368, CVE-2026-43370, CVE-2026-43371, CVE-2026-43372,\nCVE-2026-43373, CVE-2026-43377, CVE-2026-43380, CVE-2026-43381,\nCVE-2026-43382, CVE-2026-43386, CVE-2026-43387, CVE-2026-43395,\nCVE-2026-43397, CVE-2026-43405, CVE-2026-43408, CVE-2026-43409,\nCVE-2026-43411, CVE-2026-43412, CVE-2026-43413, CVE-2026-43415,\nCVE-2026-43419, CVE-2026-43420, CVE-2026-43421, CVE-2026-43424,\nCVE-2026-43425, CVE-2026-43426, CVE-2026-43427, CVE-2026-43428,\nCVE-2026-43429, CVE-2026-43430, CVE-2026-43432, CVE-2026-43436,\nCVE-2026-43437, CVE-2026-43439, CVE-2026-43441, CVE-2026-43445,\nCVE-2026-43448, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451,\nCVE-2026-43452, CVE-2026-43453, CVE-2026-43455, CVE-2026-43456,\nCVE-2026-43457, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466,\nCVE-2026-43467, CVE-2026-43468, CVE-2026-43469, CVE-2026-43471,\nCVE-2026-43472, CVE-2026-43473, CVE-2026-43475, CVE-2026-43476,\nCVE-2026-43480, CVE-2026-43483, CVE-2026-43484, CVE-2026-43488,\nCVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43495,\nCVE-2026-43496, CVE-2026-43497, CVE-2026-43499, CVE-2026-43502,\nCVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-45855, CVE-2026-45858, CVE-2026-45899, CVE-2026-45911,\nCVE-2026-45920, CVE-2026-45924, CVE-2026-45942, CVE-2026-45943,\nCVE-2026-45956, CVE-2026-45958, CVE-2026-45985, CVE-2026-45986,\nCVE-2026-45987, CVE-2026-45989, CVE-2026-45991, CVE-2026-45994,\nCVE-2026-45996, CVE-2026-45997, CVE-2026-45999, CVE-2026-46002,\nCVE-2026-46003, CVE-2026-46004, CVE-2026-46005, CVE-2026-46006,\nCVE-2026-46007, CVE-2026-46009, CVE-2026-46011, CVE-2026-46012,\nCVE-2026-46015, CVE-2026-46016, CVE-2026-46018, CVE-2026-46019,\nCVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024,\nCVE-2026-46026, CVE-2026-46027, CVE-2026-46031, CVE-2026-46033,\nCVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46041,\nCVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049,\nCVE-2026-46050, CVE-2026-46051, CVE-2026-46052, CVE-2026-46053,\nCVE-2026-46056, CVE-2026-46058, CVE-2026-46061, CVE-2026-46062,\nCVE-2026-46063, CVE-2026-46064, CVE-2026-46065, CVE-2026-46068,\nCVE-2026-46069, CVE-2026-46070, CVE-2026-46072, CVE-2026-46073,\nCVE-2026-46075, CVE-2026-46076, CVE-2026-46077, CVE-2026-46078,\nCVE-2026-46079, CVE-2026-46080, CVE-2026-46082, CVE-2026-46083,\nCVE-2026-46084, CVE-2026-46086, CVE-2026-46088, CVE-2026-46089,\nCVE-2026-46090, CVE-2026-46091, CVE-2026-46092, CVE-2026-46094,\nCVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102,\nCVE-2026-46103, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108,\nCVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113,\nCVE-2026-46114, CVE-2026-46116, CVE-2026-46117, CVE-2026-46120,\nCVE-2026-46121, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124,\nCVE-2026-46125, CVE-2026-46126, CVE-2026-46127, CVE-2026-46128,\nCVE-2026-46129, CVE-2026-46131, CVE-2026-46132, CVE-2026-46133,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145,\nCVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151,\nCVE-2026-46152, CVE-2026-46157, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46163, CVE-2026-46164, CVE-2026-46167,\nCVE-2026-46168, CVE-2026-46169, CVE-2026-46172, CVE-2026-46173,\nCVE-2026-46174, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178,\nCVE-2026-46179, CVE-2026-46180, CVE-2026-46184, CVE-2026-46186,\nCVE-2026-46187, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46194, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207,\nCVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212,\nCVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220,\nCVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229,\nCVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233,\nCVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238,\nCVE-2026-46241, CVE-2026-46273, CVE-2026-46274, CVE-2026-46280,\nCVE-2026-46282, CVE-2026-46285, CVE-2026-46286, CVE-2026-46287,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294,\nCVE-2026-46296, CVE-2026-46299, CVE-2026-46301, CVE-2026-46303,\nCVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46312,\nCVE-2026-46314, CVE-2026-46319, CVE-2026-52911, CVE-2026-52920,\nCVE-2026-52925, CVE-2026-52933, CVE-2026-52936, CVE-2026-52951,\nCVE-2026-52954, CVE-2026-52955, CVE-2026-52957, CVE-2026-52958,\nCVE-2026-52961, CVE-2026-52962, CVE-2026-52963, CVE-2026-52964,\nCVE-2026-52967, CVE-2026-52968, CVE-2026-52969, CVE-2026-52970,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52977, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986,\nCVE-2026-52989, CVE-2026-52990, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52995, CVE-2026-52998, CVE-2026-52999, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53006,\nCVE-2026-53011, CVE-2026-53012, CVE-2026-53013, CVE-2026-53014,\nCVE-2026-53015, CVE-2026-53016, CVE-2026-53021, CVE-2026-53022,\nCVE-2026-53023, CVE-2026-53032, CVE-2026-53033, CVE-2026-53034,\nCVE-2026-53035, CVE-2026-53036, CVE-2026-53037, CVE-2026-53039,\nCVE-2026-53040, CVE-2026-53041, CVE-2026-53043, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53052, CVE-2026-53056, CVE-2026-53058,\nCVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062,\nCVE-2026-53063, CVE-2026-53064, CVE-2026-53065, CVE-2026-53066,\nCVE-2026-53068, CVE-2026-53069, CVE-2026-53071, CVE-2026-53072,\nCVE-2026-53073, CVE-2026-53074, CVE-2026-53075, CVE-2026-53076,\nCVE-2026-53077, CVE-2026-53082, CVE-2026-53083, CVE-2026-53084,\nCVE-2026-53085, CVE-2026-53086, CVE-2026-53088, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53096, CVE-2026-53097, CVE-2026-53098,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53115,\nCVE-2026-53117, CVE-2026-53122, CVE-2026-53123, CVE-2026-53126,\nCVE-2026-53128, CVE-2026-53130, CVE-2026-53279, CVE-2026-53287,\nCVE-2026-53289, CVE-2026-53291, CVE-2026-53293, CVE-2026-53294,\nCVE-2026-53295, CVE-2026-53296, CVE-2026-53303, CVE-2026-53304,\nCVE-2026-53306, CVE-2026-53309, CVE-2026-53314, CVE-2026-53320,\nCVE-2026-53369, CVE-2026-53374, CVE-2026-53375, CVE-2026-53376,\nCVE-2026-53379, CVE-2026-63838, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63851, CVE-2026-63852, CVE-2026-63854, CVE-2026-63855,\nCVE-2026-63856, CVE-2026-63860, CVE-2026-63861, CVE-2026-63862,\nCVE-2026-63865, CVE-2026-64164)\n","status":"published","published":"2026-07-21T09:51:58Z","modified":"2026-11-09T12:46:41.603455464Z","updated_at":"2026-11-07T01:57:16.198641Z"},{"id":"USN-8574-2","title":"linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31506, CVE-2026-31507, CVE-2026-31508,\nCVE-2026-31509, CVE-2026-31510, CVE-2026-31511, CVE-2026-31512,\nCVE-2026-31515, CVE-2026-31516, CVE-2026-31518, CVE-2026-31519,\nCVE-2026-31520, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,\nCVE-2026-31524, CVE-2026-31525, CVE-2026-31527, CVE-2026-31528,\nCVE-2026-31530, CVE-2026-31532, CVE-2026-31540, CVE-2026-31542,\nCVE-2026-31545, CVE-2026-31546, CVE-2026-31548, CVE-2026-31549,\nCVE-2026-31550, CVE-2026-31551, CVE-2026-31552, CVE-2026-31554,\nCVE-2026-31555, CVE-2026-31556, CVE-2026-31557, CVE-2026-31563,\nCVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31575,\nCVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,\nCVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584,\nCVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588,\nCVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596,\nCVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,\nCVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606,\nCVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613,\nCVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618,\nCVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,\nCVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628,\nCVE-2026-31629, CVE-2026-31634, CVE-2026-31638, CVE-2026-31639,\nCVE-2026-31642, CVE-2026-31645, CVE-2026-31646, CVE-2026-31648,\nCVE-2026-31651, CVE-2026-31655, CVE-2026-31656, CVE-2026-31658,\nCVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664,\nCVE-2026-31665, CVE-2026-31667, CVE-2026-31670, CVE-2026-31671,\nCVE-2026-31672, CVE-2026-31673, CVE-2026-31674, CVE-2026-31675,\nCVE-2026-31677, CVE-2026-31678, CVE-2026-31679, CVE-2026-31680,\nCVE-2026-31681, CVE-2026-31683, CVE-2026-31684, CVE-2026-31686,\nCVE-2026-31689, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696,\nCVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700,\nCVE-2026-31701, CVE-2026-31702, CVE-2026-31704, CVE-2026-31705,\nCVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709,\nCVE-2026-31711, CVE-2026-31712, CVE-2026-31714, CVE-2026-31715,\nCVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31722,\nCVE-2026-31723, CVE-2026-31724, CVE-2026-31725, CVE-2026-31726,\nCVE-2026-31728, CVE-2026-31729, CVE-2026-31730, CVE-2026-31731,\nCVE-2026-31737, CVE-2026-31738, CVE-2026-31740, CVE-2026-31741,\nCVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751,\nCVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756,\nCVE-2026-31758, CVE-2026-31759, CVE-2026-31761, CVE-2026-31762,\nCVE-2026-31763, CVE-2026-31767, CVE-2026-31768, CVE-2026-31770,\nCVE-2026-31772, CVE-2026-31773, CVE-2026-31778, CVE-2026-31779,\nCVE-2026-31780, CVE-2026-31781, CVE-2026-31788, CVE-2026-43007,\nCVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015,\nCVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019,\nCVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025,\nCVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030,\nCVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43040,\nCVE-2026-43041, CVE-2026-43043, CVE-2026-43044, CVE-2026-43046,\nCVE-2026-43047, CVE-2026-43049, CVE-2026-43050, CVE-2026-43051,\nCVE-2026-43052, CVE-2026-43054, CVE-2026-43056, CVE-2026-43057,\nCVE-2026-43058, CVE-2026-43059, CVE-2026-43060, CVE-2026-43061,\nCVE-2026-43062, CVE-2026-43064, CVE-2026-43065, CVE-2026-43066,\nCVE-2026-43068, CVE-2026-43069, CVE-2026-43072, CVE-2026-43073,\nCVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079,\nCVE-2026-43080, CVE-2026-43081, CVE-2026-43082, CVE-2026-43084,\nCVE-2026-43085, CVE-2026-43086, CVE-2026-43088, CVE-2026-43089,\nCVE-2026-43091, CVE-2026-43092, CVE-2026-43093, CVE-2026-43094,\nCVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104,\nCVE-2026-43105, CVE-2026-43107, CVE-2026-43109, CVE-2026-43110,\nCVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43119,\nCVE-2026-43120, CVE-2026-43129, CVE-2026-43162, CVE-2026-43245,\nCVE-2026-43252, CVE-2026-43265, CVE-2026-43281, CVE-2026-43324,\nCVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330,\nCVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,\nCVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43342,\nCVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43355,\nCVE-2026-43357, CVE-2026-43359, CVE-2026-43360, CVE-2026-43361,\nCVE-2026-43362, CVE-2026-43363, CVE-2026-43365, CVE-2026-43366,\nCVE-2026-43368, CVE-2026-43370, CVE-2026-43371, CVE-2026-43372,\nCVE-2026-43373, CVE-2026-43377, CVE-2026-43380, CVE-2026-43381,\nCVE-2026-43382, CVE-2026-43386, CVE-2026-43387, CVE-2026-43395,\nCVE-2026-43397, CVE-2026-43405, CVE-2026-43408, CVE-2026-43409,\nCVE-2026-43411, CVE-2026-43412, CVE-2026-43413, CVE-2026-43415,\nCVE-2026-43419, CVE-2026-43420, CVE-2026-43421, CVE-2026-43424,\nCVE-2026-43425, CVE-2026-43426, CVE-2026-43427, CVE-2026-43428,\nCVE-2026-43429, CVE-2026-43430, CVE-2026-43432, CVE-2026-43436,\nCVE-2026-43437, CVE-2026-43439, CVE-2026-43441, CVE-2026-43445,\nCVE-2026-43448, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451,\nCVE-2026-43452, CVE-2026-43453, CVE-2026-43455, CVE-2026-43456,\nCVE-2026-43457, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466,\nCVE-2026-43467, CVE-2026-43468, CVE-2026-43469, CVE-2026-43471,\nCVE-2026-43472, CVE-2026-43473, CVE-2026-43475, CVE-2026-43476,\nCVE-2026-43480, CVE-2026-43483, CVE-2026-43484, CVE-2026-43488,\nCVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43495,\nCVE-2026-43496, CVE-2026-43497, CVE-2026-43499, CVE-2026-43502,\nCVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-45855, CVE-2026-45858, CVE-2026-45899, CVE-2026-45911,\nCVE-2026-45920, CVE-2026-45924, CVE-2026-45942, CVE-2026-45943,\nCVE-2026-45956, CVE-2026-45958, CVE-2026-45985, CVE-2026-45986,\nCVE-2026-45987, CVE-2026-45989, CVE-2026-45991, CVE-2026-45994,\nCVE-2026-45996, CVE-2026-45997, CVE-2026-45999, CVE-2026-46002,\nCVE-2026-46003, CVE-2026-46004, CVE-2026-46005, CVE-2026-46006,\nCVE-2026-46007, CVE-2026-46009, CVE-2026-46011, CVE-2026-46012,\nCVE-2026-46015, CVE-2026-46016, CVE-2026-46018, CVE-2026-46019,\nCVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024,\nCVE-2026-46026, CVE-2026-46027, CVE-2026-46031, CVE-2026-46033,\nCVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46041,\nCVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049,\nCVE-2026-46050, CVE-2026-46051, CVE-2026-46052, CVE-2026-46053,\nCVE-2026-46056, CVE-2026-46058, CVE-2026-46061, CVE-2026-46062,\nCVE-2026-46063, CVE-2026-46064, CVE-2026-46065, CVE-2026-46068,\nCVE-2026-46069, CVE-2026-46070, CVE-2026-46072, CVE-2026-46073,\nCVE-2026-46075, CVE-2026-46076, CVE-2026-46077, CVE-2026-46078,\nCVE-2026-46079, CVE-2026-46080, CVE-2026-46082, CVE-2026-46083,\nCVE-2026-46084, CVE-2026-46086, CVE-2026-46088, CVE-2026-46089,\nCVE-2026-46090, CVE-2026-46091, CVE-2026-46092, CVE-2026-46094,\nCVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102,\nCVE-2026-46103, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108,\nCVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113,\nCVE-2026-46114, CVE-2026-46116, CVE-2026-46117, CVE-2026-46120,\nCVE-2026-46121, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124,\nCVE-2026-46125, CVE-2026-46126, CVE-2026-46127, CVE-2026-46128,\nCVE-2026-46129, CVE-2026-46131, CVE-2026-46132, CVE-2026-46133,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145,\nCVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151,\nCVE-2026-46152, CVE-2026-46157, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46163, CVE-2026-46164, CVE-2026-46167,\nCVE-2026-46168, CVE-2026-46169, CVE-2026-46172, CVE-2026-46173,\nCVE-2026-46174, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178,\nCVE-2026-46179, CVE-2026-46180, CVE-2026-46184, CVE-2026-46186,\nCVE-2026-46187, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46194, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207,\nCVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212,\nCVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220,\nCVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229,\nCVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233,\nCVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238,\nCVE-2026-46241, CVE-2026-46273, CVE-2026-46274, CVE-2026-46280,\nCVE-2026-46282, CVE-2026-46285, CVE-2026-46286, CVE-2026-46287,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294,\nCVE-2026-46296, CVE-2026-46299, CVE-2026-46301, CVE-2026-46303,\nCVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46312,\nCVE-2026-46314, CVE-2026-46319, CVE-2026-52911, CVE-2026-52920,\nCVE-2026-52925, CVE-2026-52933, CVE-2026-52936, CVE-2026-52951,\nCVE-2026-52954, CVE-2026-52955, CVE-2026-52957, CVE-2026-52958,\nCVE-2026-52961, CVE-2026-52962, CVE-2026-52963, CVE-2026-52964,\nCVE-2026-52967, CVE-2026-52968, CVE-2026-52969, CVE-2026-52970,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52977, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986,\nCVE-2026-52989, CVE-2026-52990, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52995, CVE-2026-52998, CVE-2026-52999, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53006,\nCVE-2026-53011, CVE-2026-53012, CVE-2026-53013, CVE-2026-53014,\nCVE-2026-53015, CVE-2026-53016, CVE-2026-53021, CVE-2026-53022,\nCVE-2026-53023, CVE-2026-53032, CVE-2026-53033, CVE-2026-53034,\nCVE-2026-53035, CVE-2026-53036, CVE-2026-53037, CVE-2026-53039,\nCVE-2026-53040, CVE-2026-53041, CVE-2026-53043, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53052, CVE-2026-53056, CVE-2026-53058,\nCVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062,\nCVE-2026-53063, CVE-2026-53064, CVE-2026-53065, CVE-2026-53066,\nCVE-2026-53068, CVE-2026-53069, CVE-2026-53071, CVE-2026-53072,\nCVE-2026-53073, CVE-2026-53074, CVE-2026-53075, CVE-2026-53076,\nCVE-2026-53077, CVE-2026-53082, CVE-2026-53083, CVE-2026-53084,\nCVE-2026-53085, CVE-2026-53086, CVE-2026-53088, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53096, CVE-2026-53097, CVE-2026-53098,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53115,\nCVE-2026-53117, CVE-2026-53122, CVE-2026-53123, CVE-2026-53126,\nCVE-2026-53128, CVE-2026-53130, CVE-2026-53279, CVE-2026-53287,\nCVE-2026-53289, CVE-2026-53291, CVE-2026-53293, CVE-2026-53294,\nCVE-2026-53295, CVE-2026-53296, CVE-2026-53303, CVE-2026-53304,\nCVE-2026-53306, CVE-2026-53309, CVE-2026-53314, CVE-2026-53320,\nCVE-2026-53369, CVE-2026-53374, CVE-2026-53375, CVE-2026-53376,\nCVE-2026-53379, CVE-2026-63838, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63851, CVE-2026-63852, CVE-2026-63854, CVE-2026-63855,\nCVE-2026-63856, CVE-2026-63860, CVE-2026-63861, CVE-2026-63862,\nCVE-2026-63865, CVE-2026-64164)\n","status":"published","published":"2026-07-23T07:48:36Z","modified":"2026-11-09T12:48:51.609882158Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8574-3","title":"linux-ibm, linux-ibm-6.8, linux-nvidia-tegra, linux-xilinx vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31506, CVE-2026-31507, CVE-2026-31508,\nCVE-2026-31509, CVE-2026-31510, CVE-2026-31511, CVE-2026-31512,\nCVE-2026-31515, CVE-2026-31516, CVE-2026-31518, CVE-2026-31519,\nCVE-2026-31520, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,\nCVE-2026-31524, CVE-2026-31525, CVE-2026-31527, CVE-2026-31528,\nCVE-2026-31530, CVE-2026-31532, CVE-2026-31540, CVE-2026-31542,\nCVE-2026-31545, CVE-2026-31546, CVE-2026-31548, CVE-2026-31549,\nCVE-2026-31550, CVE-2026-31551, CVE-2026-31552, CVE-2026-31554,\nCVE-2026-31555, CVE-2026-31556, CVE-2026-31557, CVE-2026-31563,\nCVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31575,\nCVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,\nCVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584,\nCVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588,\nCVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596,\nCVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,\nCVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606,\nCVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613,\nCVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618,\nCVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,\nCVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628,\nCVE-2026-31629, CVE-2026-31634, CVE-2026-31638, CVE-2026-31639,\nCVE-2026-31642, CVE-2026-31645, CVE-2026-31646, CVE-2026-31648,\nCVE-2026-31651, CVE-2026-31655, CVE-2026-31656, CVE-2026-31658,\nCVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664,\nCVE-2026-31665, CVE-2026-31667, CVE-2026-31670, CVE-2026-31671,\nCVE-2026-31672, CVE-2026-31673, CVE-2026-31674, CVE-2026-31675,\nCVE-2026-31677, CVE-2026-31678, CVE-2026-31679, CVE-2026-31680,\nCVE-2026-31681, CVE-2026-31683, CVE-2026-31684, CVE-2026-31686,\nCVE-2026-31689, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696,\nCVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700,\nCVE-2026-31701, CVE-2026-31702, CVE-2026-31704, CVE-2026-31705,\nCVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709,\nCVE-2026-31711, CVE-2026-31712, CVE-2026-31714, CVE-2026-31715,\nCVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31722,\nCVE-2026-31723, CVE-2026-31724, CVE-2026-31725, CVE-2026-31726,\nCVE-2026-31728, CVE-2026-31729, CVE-2026-31730, CVE-2026-31731,\nCVE-2026-31737, CVE-2026-31738, CVE-2026-31740, CVE-2026-31741,\nCVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751,\nCVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756,\nCVE-2026-31758, CVE-2026-31759, CVE-2026-31761, CVE-2026-31762,\nCVE-2026-31763, CVE-2026-31767, CVE-2026-31768, CVE-2026-31770,\nCVE-2026-31772, CVE-2026-31773, CVE-2026-31778, CVE-2026-31779,\nCVE-2026-31780, CVE-2026-31781, CVE-2026-31788, CVE-2026-43007,\nCVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015,\nCVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019,\nCVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025,\nCVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030,\nCVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43040,\nCVE-2026-43041, CVE-2026-43043, CVE-2026-43044, CVE-2026-43046,\nCVE-2026-43047, CVE-2026-43049, CVE-2026-43050, CVE-2026-43051,\nCVE-2026-43052, CVE-2026-43054, CVE-2026-43056, CVE-2026-43057,\nCVE-2026-43058, CVE-2026-43059, CVE-2026-43060, CVE-2026-43061,\nCVE-2026-43062, CVE-2026-43064, CVE-2026-43065, CVE-2026-43066,\nCVE-2026-43068, CVE-2026-43069, CVE-2026-43072, CVE-2026-43073,\nCVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079,\nCVE-2026-43080, CVE-2026-43081, CVE-2026-43082, CVE-2026-43084,\nCVE-2026-43085, CVE-2026-43086, CVE-2026-43088, CVE-2026-43089,\nCVE-2026-43091, CVE-2026-43092, CVE-2026-43093, CVE-2026-43094,\nCVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104,\nCVE-2026-43105, CVE-2026-43107, CVE-2026-43109, CVE-2026-43110,\nCVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43119,\nCVE-2026-43120, CVE-2026-43129, CVE-2026-43162, CVE-2026-43245,\nCVE-2026-43252, CVE-2026-43265, CVE-2026-43281, CVE-2026-43324,\nCVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330,\nCVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,\nCVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43342,\nCVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43355,\nCVE-2026-43357, CVE-2026-43359, CVE-2026-43360, CVE-2026-43361,\nCVE-2026-43362, CVE-2026-43363, CVE-2026-43365, CVE-2026-43366,\nCVE-2026-43368, CVE-2026-43370, CVE-2026-43371, CVE-2026-43372,\nCVE-2026-43373, CVE-2026-43377, CVE-2026-43380, CVE-2026-43381,\nCVE-2026-43382, CVE-2026-43386, CVE-2026-43387, CVE-2026-43395,\nCVE-2026-43397, CVE-2026-43405, CVE-2026-43408, CVE-2026-43409,\nCVE-2026-43411, CVE-2026-43412, CVE-2026-43413, CVE-2026-43415,\nCVE-2026-43419, CVE-2026-43420, CVE-2026-43421, CVE-2026-43424,\nCVE-2026-43425, CVE-2026-43426, CVE-2026-43427, CVE-2026-43428,\nCVE-2026-43429, CVE-2026-43430, CVE-2026-43432, CVE-2026-43436,\nCVE-2026-43437, CVE-2026-43439, CVE-2026-43441, CVE-2026-43445,\nCVE-2026-43448, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451,\nCVE-2026-43452, CVE-2026-43453, CVE-2026-43455, CVE-2026-43456,\nCVE-2026-43457, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466,\nCVE-2026-43467, CVE-2026-43468, CVE-2026-43469, CVE-2026-43471,\nCVE-2026-43472, CVE-2026-43473, CVE-2026-43475, CVE-2026-43476,\nCVE-2026-43480, CVE-2026-43483, CVE-2026-43484, CVE-2026-43488,\nCVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43495,\nCVE-2026-43496, CVE-2026-43497, CVE-2026-43499, CVE-2026-43502,\nCVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-45855, CVE-2026-45858, CVE-2026-45899, CVE-2026-45911,\nCVE-2026-45920, CVE-2026-45924, CVE-2026-45942, CVE-2026-45943,\nCVE-2026-45956, CVE-2026-45958, CVE-2026-45985, CVE-2026-45986,\nCVE-2026-45987, CVE-2026-45989, CVE-2026-45991, CVE-2026-45994,\nCVE-2026-45996, CVE-2026-45997, CVE-2026-45999, CVE-2026-46002,\nCVE-2026-46003, CVE-2026-46004, CVE-2026-46005, CVE-2026-46006,\nCVE-2026-46007, CVE-2026-46009, CVE-2026-46011, CVE-2026-46012,\nCVE-2026-46015, CVE-2026-46016, CVE-2026-46018, CVE-2026-46019,\nCVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024,\nCVE-2026-46026, CVE-2026-46027, CVE-2026-46031, CVE-2026-46033,\nCVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46041,\nCVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049,\nCVE-2026-46050, CVE-2026-46051, CVE-2026-46052, CVE-2026-46053,\nCVE-2026-46056, CVE-2026-46058, CVE-2026-46061, CVE-2026-46062,\nCVE-2026-46063, CVE-2026-46064, CVE-2026-46065, CVE-2026-46068,\nCVE-2026-46069, CVE-2026-46070, CVE-2026-46072, CVE-2026-46073,\nCVE-2026-46075, CVE-2026-46076, CVE-2026-46077, CVE-2026-46078,\nCVE-2026-46079, CVE-2026-46080, CVE-2026-46082, CVE-2026-46083,\nCVE-2026-46084, CVE-2026-46086, CVE-2026-46088, CVE-2026-46089,\nCVE-2026-46090, CVE-2026-46091, CVE-2026-46092, CVE-2026-46094,\nCVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102,\nCVE-2026-46103, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108,\nCVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113,\nCVE-2026-46114, CVE-2026-46116, CVE-2026-46117, CVE-2026-46120,\nCVE-2026-46121, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124,\nCVE-2026-46125, CVE-2026-46126, CVE-2026-46127, CVE-2026-46128,\nCVE-2026-46129, CVE-2026-46131, CVE-2026-46132, CVE-2026-46133,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145,\nCVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151,\nCVE-2026-46152, CVE-2026-46157, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46163, CVE-2026-46164, CVE-2026-46167,\nCVE-2026-46168, CVE-2026-46169, CVE-2026-46172, CVE-2026-46173,\nCVE-2026-46174, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178,\nCVE-2026-46179, CVE-2026-46180, CVE-2026-46184, CVE-2026-46186,\nCVE-2026-46187, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46194, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207,\nCVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212,\nCVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220,\nCVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229,\nCVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233,\nCVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238,\nCVE-2026-46241, CVE-2026-46273, CVE-2026-46274, CVE-2026-46280,\nCVE-2026-46282, CVE-2026-46285, CVE-2026-46286, CVE-2026-46287,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294,\nCVE-2026-46296, CVE-2026-46299, CVE-2026-46301, CVE-2026-46303,\nCVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46312,\nCVE-2026-46314, CVE-2026-46319, CVE-2026-52911, CVE-2026-52920,\nCVE-2026-52925, CVE-2026-52933, CVE-2026-52936, CVE-2026-52951,\nCVE-2026-52954, CVE-2026-52955, CVE-2026-52957, CVE-2026-52958,\nCVE-2026-52961, CVE-2026-52962, CVE-2026-52963, CVE-2026-52964,\nCVE-2026-52967, CVE-2026-52968, CVE-2026-52969, CVE-2026-52970,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52977, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986,\nCVE-2026-52989, CVE-2026-52990, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52995, CVE-2026-52998, CVE-2026-52999, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53006,\nCVE-2026-53011, CVE-2026-53012, CVE-2026-53013, CVE-2026-53014,\nCVE-2026-53015, CVE-2026-53016, CVE-2026-53021, CVE-2026-53022,\nCVE-2026-53023, CVE-2026-53032, CVE-2026-53033, CVE-2026-53034,\nCVE-2026-53035, CVE-2026-53036, CVE-2026-53037, CVE-2026-53039,\nCVE-2026-53040, CVE-2026-53041, CVE-2026-53043, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53052, CVE-2026-53056, CVE-2026-53058,\nCVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062,\nCVE-2026-53063, CVE-2026-53064, CVE-2026-53065, CVE-2026-53066,\nCVE-2026-53068, CVE-2026-53069, CVE-2026-53071, CVE-2026-53072,\nCVE-2026-53073, CVE-2026-53074, CVE-2026-53075, CVE-2026-53076,\nCVE-2026-53077, CVE-2026-53082, CVE-2026-53083, CVE-2026-53084,\nCVE-2026-53085, CVE-2026-53086, CVE-2026-53088, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53096, CVE-2026-53097, CVE-2026-53098,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53115,\nCVE-2026-53117, CVE-2026-53122, CVE-2026-53123, CVE-2026-53126,\nCVE-2026-53128, CVE-2026-53130, CVE-2026-53279, CVE-2026-53287,\nCVE-2026-53289, CVE-2026-53291, CVE-2026-53293, CVE-2026-53294,\nCVE-2026-53295, CVE-2026-53296, CVE-2026-53303, CVE-2026-53304,\nCVE-2026-53306, CVE-2026-53309, CVE-2026-53314, CVE-2026-53320,\nCVE-2026-53369, CVE-2026-53374, CVE-2026-53375, CVE-2026-53376,\nCVE-2026-53379, CVE-2026-63838, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63851, CVE-2026-63852, CVE-2026-63854, CVE-2026-63855,\nCVE-2026-63856, CVE-2026-63860, CVE-2026-63861, CVE-2026-63862,\nCVE-2026-63865, CVE-2026-64164)\n","status":"published","published":"2026-07-28T07:23:25Z","modified":"2026-11-09T12:49:17.012782847Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8595-1","title":"linux-oracle-6.8 vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31507, CVE-2026-31508, CVE-2026-31509,\nCVE-2026-31510, CVE-2026-31511, CVE-2026-31512, CVE-2026-31515,\nCVE-2026-31516, CVE-2026-31518, CVE-2026-31519, CVE-2026-31520,\nCVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524,\nCVE-2026-31525, CVE-2026-31527, CVE-2026-31528, CVE-2026-31530,\nCVE-2026-31532, CVE-2026-31540, CVE-2026-31542, CVE-2026-31545,\nCVE-2026-31546, CVE-2026-31548, CVE-2026-31549, CVE-2026-31550,\nCVE-2026-31551, CVE-2026-31552, CVE-2026-31554, CVE-2026-31555,\nCVE-2026-31556, CVE-2026-31557, CVE-2026-31563, CVE-2026-31565,\nCVE-2026-31566, CVE-2026-31570, CVE-2026-31575, CVE-2026-31576,\nCVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581,\nCVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585,\nCVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590,\nCVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597,\nCVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603,\nCVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31610,\nCVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31615,\nCVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619,\nCVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625,\nCVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629,\nCVE-2026-31634, CVE-2026-31638, CVE-2026-31639, CVE-2026-31642,\nCVE-2026-31645, CVE-2026-31646, CVE-2026-31648, CVE-2026-31651,\nCVE-2026-31655, CVE-2026-31656, CVE-2026-31658, CVE-2026-31660,\nCVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665,\nCVE-2026-31667, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672,\nCVE-2026-31673, CVE-2026-31674, CVE-2026-31675, CVE-2026-31677,\nCVE-2026-31678, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,\nCVE-2026-31683, CVE-2026-31684, CVE-2026-31686, CVE-2026-31689,\nCVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,\nCVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701,\nCVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706,\nCVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711,\nCVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716,\nCVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723,\nCVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728,\nCVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737,\nCVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747,\nCVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,\nCVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,\nCVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,\nCVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772,\nCVE-2026-31773, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780,\nCVE-2026-31781, CVE-2026-31788, CVE-2026-43007, CVE-2026-43012,\nCVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016,\nCVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020,\nCVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026,\nCVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,\nCVE-2026-43035, CVE-2026-43036, CVE-2026-43040, CVE-2026-43041,\nCVE-2026-43043, CVE-2026-43044, CVE-2026-43046, CVE-2026-43047,\nCVE-2026-43049, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052,\nCVE-2026-43054, CVE-2026-43056, CVE-2026-43057, CVE-2026-43058,\nCVE-2026-43059, CVE-2026-43060, CVE-2026-43061, CVE-2026-43062,\nCVE-2026-43064, CVE-2026-43065, CVE-2026-43066, CVE-2026-43068,\nCVE-2026-43069, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074,\nCVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080,\nCVE-2026-43081, CVE-2026-43082, CVE-2026-43084, CVE-2026-43085,\nCVE-2026-43086, CVE-2026-43088, CVE-2026-43089, CVE-2026-43091,\nCVE-2026-43092, CVE-2026-43093, CVE-2026-43094, CVE-2026-43098,\nCVE-2026-43099, CVE-2026-43103, CVE-2026-43104, CVE-2026-43105,\nCVE-2026-43107, CVE-2026-43109, CVE-2026-43110, CVE-2026-43111,\nCVE-2026-43112, CVE-2026-43113, CVE-2026-43119, CVE-2026-43120,\nCVE-2026-43129, CVE-2026-43162, CVE-2026-43245, CVE-2026-43252,\nCVE-2026-43265, CVE-2026-43281, CVE-2026-43324, CVE-2026-43327,\nCVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332,\nCVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338,\nCVE-2026-43339, CVE-2026-43340, CVE-2026-43342, CVE-2026-43343,\nCVE-2026-43345, CVE-2026-43350, CVE-2026-43355, CVE-2026-43357,\nCVE-2026-43359, CVE-2026-43360, CVE-2026-43361, CVE-2026-43362,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43371, CVE-2026-43372, CVE-2026-43373,\nCVE-2026-43377, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43386, CVE-2026-43387, CVE-2026-43395, CVE-2026-43397,\nCVE-2026-43405, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43415, CVE-2026-43419,\nCVE-2026-43420, CVE-2026-43421, CVE-2026-43424, CVE-2026-43425,\nCVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429,\nCVE-2026-43430, CVE-2026-43432, CVE-2026-43436, CVE-2026-43437,\nCVE-2026-43439, CVE-2026-43441, CVE-2026-43445, CVE-2026-43448,\nCVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,\nCVE-2026-43453, CVE-2026-43455, CVE-2026-43456, CVE-2026-43457,\nCVE-2026-43458, CVE-2026-43459, CVE-2026-43466, CVE-2026-43467,\nCVE-2026-43468, CVE-2026-43469, CVE-2026-43471, CVE-2026-43472,\nCVE-2026-43473, CVE-2026-43475, CVE-2026-43476, CVE-2026-43480,\nCVE-2026-43483, CVE-2026-43484, CVE-2026-43488, CVE-2026-43490,\nCVE-2026-43491, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43499, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,\nCVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,\nCVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45855,\nCVE-2026-45858, CVE-2026-45899, CVE-2026-45911, CVE-2026-45920,\nCVE-2026-45924, CVE-2026-45942, CVE-2026-45943, CVE-2026-45956,\nCVE-2026-45958, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987,\nCVE-2026-45989, CVE-2026-45991, CVE-2026-45994, CVE-2026-45996,\nCVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003,\nCVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007,\nCVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015,\nCVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021,\nCVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026,\nCVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037,\nCVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46120, CVE-2026-46121,\nCVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125,\nCVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129,\nCVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46136,\nCVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142,\nCVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161,\nCVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174,\nCVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179,\nCVE-2026-46180, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46194, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198,\nCVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46204,\nCVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208,\nCVE-2026-46209, CVE-2026-46211, CVE-2026-46212, CVE-2026-46214,\nCVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46225,\nCVE-2026-46226, CVE-2026-46227, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46241,\nCVE-2026-46273, CVE-2026-46274, CVE-2026-46280, CVE-2026-46282,\nCVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46291,\nCVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296,\nCVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314,\nCVE-2026-46319, CVE-2026-52911, CVE-2026-52920, CVE-2026-52925,\nCVE-2026-52933, CVE-2026-52936, CVE-2026-52951, CVE-2026-52954,\nCVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52961,\nCVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52967,\nCVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52974,\nCVE-2026-52975, CVE-2026-52977, CVE-2026-52981, CVE-2026-52982,\nCVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,\nCVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,\nCVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015,\nCVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,\nCVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035,\nCVE-2026-53036, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,\nCVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,\nCVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,\nCVE-2026-53052, CVE-2026-53056, CVE-2026-53058, CVE-2026-53059,\nCVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063,\nCVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53068,\nCVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53088, CVE-2026-53093, CVE-2026-53094,\nCVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53110,\nCVE-2026-53111, CVE-2026-53112, CVE-2026-53115, CVE-2026-53117,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53126, CVE-2026-53128,\nCVE-2026-53130, CVE-2026-53279, CVE-2026-53287, CVE-2026-53289,\nCVE-2026-53291, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295,\nCVE-2026-53296, CVE-2026-53303, CVE-2026-53304, CVE-2026-53306,\nCVE-2026-53309, CVE-2026-53314, CVE-2026-53320, CVE-2026-53369,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53379,\nCVE-2026-63838, CVE-2026-63843, CVE-2026-63844, CVE-2026-63845,\nCVE-2026-63846, CVE-2026-63847, CVE-2026-63848, CVE-2026-63851,\nCVE-2026-63852, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63860, CVE-2026-63861, CVE-2026-63862, CVE-2026-63865,\nCVE-2026-64164)\n","status":"published","published":"2026-07-23T07:57:09Z","modified":"2026-11-09T12:46:39.626735177Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8595-2","title":"linux-aws vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31507, CVE-2026-31508, CVE-2026-31509,\nCVE-2026-31510, CVE-2026-31511, CVE-2026-31512, CVE-2026-31515,\nCVE-2026-31516, CVE-2026-31518, CVE-2026-31519, CVE-2026-31520,\nCVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524,\nCVE-2026-31525, CVE-2026-31527, CVE-2026-31528, CVE-2026-31530,\nCVE-2026-31532, CVE-2026-31540, CVE-2026-31542, CVE-2026-31545,\nCVE-2026-31546, CVE-2026-31548, CVE-2026-31549, CVE-2026-31550,\nCVE-2026-31551, CVE-2026-31552, CVE-2026-31554, CVE-2026-31555,\nCVE-2026-31556, CVE-2026-31557, CVE-2026-31563, CVE-2026-31565,\nCVE-2026-31566, CVE-2026-31570, CVE-2026-31575, CVE-2026-31576,\nCVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581,\nCVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585,\nCVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590,\nCVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597,\nCVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603,\nCVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31610,\nCVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31615,\nCVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619,\nCVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625,\nCVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629,\nCVE-2026-31634, CVE-2026-31638, CVE-2026-31639, CVE-2026-31642,\nCVE-2026-31645, CVE-2026-31646, CVE-2026-31648, CVE-2026-31651,\nCVE-2026-31655, CVE-2026-31656, CVE-2026-31658, CVE-2026-31660,\nCVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665,\nCVE-2026-31667, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672,\nCVE-2026-31673, CVE-2026-31674, CVE-2026-31675, CVE-2026-31677,\nCVE-2026-31678, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,\nCVE-2026-31683, CVE-2026-31684, CVE-2026-31686, CVE-2026-31689,\nCVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,\nCVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701,\nCVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706,\nCVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711,\nCVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716,\nCVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723,\nCVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728,\nCVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737,\nCVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747,\nCVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,\nCVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,\nCVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,\nCVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772,\nCVE-2026-31773, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780,\nCVE-2026-31781, CVE-2026-31788, CVE-2026-43007, CVE-2026-43012,\nCVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016,\nCVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020,\nCVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026,\nCVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,\nCVE-2026-43035, CVE-2026-43036, CVE-2026-43040, CVE-2026-43041,\nCVE-2026-43043, CVE-2026-43044, CVE-2026-43046, CVE-2026-43047,\nCVE-2026-43049, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052,\nCVE-2026-43054, CVE-2026-43056, CVE-2026-43057, CVE-2026-43058,\nCVE-2026-43059, CVE-2026-43060, CVE-2026-43061, CVE-2026-43062,\nCVE-2026-43064, CVE-2026-43065, CVE-2026-43066, CVE-2026-43068,\nCVE-2026-43069, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074,\nCVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080,\nCVE-2026-43081, CVE-2026-43082, CVE-2026-43084, CVE-2026-43085,\nCVE-2026-43086, CVE-2026-43088, CVE-2026-43089, CVE-2026-43091,\nCVE-2026-43092, CVE-2026-43093, CVE-2026-43094, CVE-2026-43098,\nCVE-2026-43099, CVE-2026-43103, CVE-2026-43104, CVE-2026-43105,\nCVE-2026-43107, CVE-2026-43109, CVE-2026-43110, CVE-2026-43111,\nCVE-2026-43112, CVE-2026-43113, CVE-2026-43119, CVE-2026-43120,\nCVE-2026-43129, CVE-2026-43162, CVE-2026-43245, CVE-2026-43252,\nCVE-2026-43265, CVE-2026-43281, CVE-2026-43324, CVE-2026-43327,\nCVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332,\nCVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338,\nCVE-2026-43339, CVE-2026-43340, CVE-2026-43342, CVE-2026-43343,\nCVE-2026-43345, CVE-2026-43350, CVE-2026-43355, CVE-2026-43357,\nCVE-2026-43359, CVE-2026-43360, CVE-2026-43361, CVE-2026-43362,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43371, CVE-2026-43372, CVE-2026-43373,\nCVE-2026-43377, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43386, CVE-2026-43387, CVE-2026-43395, CVE-2026-43397,\nCVE-2026-43405, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43415, CVE-2026-43419,\nCVE-2026-43420, CVE-2026-43421, CVE-2026-43424, CVE-2026-43425,\nCVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429,\nCVE-2026-43430, CVE-2026-43432, CVE-2026-43436, CVE-2026-43437,\nCVE-2026-43439, CVE-2026-43441, CVE-2026-43445, CVE-2026-43448,\nCVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,\nCVE-2026-43453, CVE-2026-43455, CVE-2026-43456, CVE-2026-43457,\nCVE-2026-43458, CVE-2026-43459, CVE-2026-43466, CVE-2026-43467,\nCVE-2026-43468, CVE-2026-43469, CVE-2026-43471, CVE-2026-43472,\nCVE-2026-43473, CVE-2026-43475, CVE-2026-43476, CVE-2026-43480,\nCVE-2026-43483, CVE-2026-43484, CVE-2026-43488, CVE-2026-43490,\nCVE-2026-43491, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43499, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,\nCVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,\nCVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45855,\nCVE-2026-45858, CVE-2026-45899, CVE-2026-45911, CVE-2026-45920,\nCVE-2026-45924, CVE-2026-45942, CVE-2026-45943, CVE-2026-45956,\nCVE-2026-45958, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987,\nCVE-2026-45989, CVE-2026-45991, CVE-2026-45994, CVE-2026-45996,\nCVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003,\nCVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007,\nCVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015,\nCVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021,\nCVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026,\nCVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037,\nCVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46120, CVE-2026-46121,\nCVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125,\nCVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129,\nCVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46136,\nCVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142,\nCVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161,\nCVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174,\nCVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179,\nCVE-2026-46180, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46194, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198,\nCVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46204,\nCVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208,\nCVE-2026-46209, CVE-2026-46211, CVE-2026-46212, CVE-2026-46214,\nCVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46225,\nCVE-2026-46226, CVE-2026-46227, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46241,\nCVE-2026-46273, CVE-2026-46274, CVE-2026-46280, CVE-2026-46282,\nCVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46291,\nCVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296,\nCVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314,\nCVE-2026-46319, CVE-2026-52911, CVE-2026-52920, CVE-2026-52925,\nCVE-2026-52933, CVE-2026-52936, CVE-2026-52951, CVE-2026-52954,\nCVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52961,\nCVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52967,\nCVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52974,\nCVE-2026-52975, CVE-2026-52977, CVE-2026-52981, CVE-2026-52982,\nCVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,\nCVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,\nCVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015,\nCVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,\nCVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035,\nCVE-2026-53036, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,\nCVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,\nCVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,\nCVE-2026-53052, CVE-2026-53056, CVE-2026-53058, CVE-2026-53059,\nCVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063,\nCVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53068,\nCVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53088, CVE-2026-53093, CVE-2026-53094,\nCVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53110,\nCVE-2026-53111, CVE-2026-53112, CVE-2026-53115, CVE-2026-53117,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53126, CVE-2026-53128,\nCVE-2026-53130, CVE-2026-53279, CVE-2026-53287, CVE-2026-53289,\nCVE-2026-53291, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295,\nCVE-2026-53296, CVE-2026-53303, CVE-2026-53304, CVE-2026-53306,\nCVE-2026-53309, CVE-2026-53314, CVE-2026-53320, CVE-2026-53369,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53379,\nCVE-2026-63838, CVE-2026-63843, CVE-2026-63844, CVE-2026-63845,\nCVE-2026-63846, CVE-2026-63847, CVE-2026-63848, CVE-2026-63851,\nCVE-2026-63852, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63860, CVE-2026-63861, CVE-2026-63862, CVE-2026-63865,\nCVE-2026-64164)\n","status":"published","published":"2026-07-24T10:14:09Z","modified":"2026-11-09T12:46:40.833371554Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8595-3","title":"linux-aws-6.8, linux-aws-fips vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31507, CVE-2026-31508, CVE-2026-31509,\nCVE-2026-31510, CVE-2026-31511, CVE-2026-31512, CVE-2026-31515,\nCVE-2026-31516, CVE-2026-31518, CVE-2026-31519, CVE-2026-31520,\nCVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524,\nCVE-2026-31525, CVE-2026-31527, CVE-2026-31528, CVE-2026-31530,\nCVE-2026-31532, CVE-2026-31540, CVE-2026-31542, CVE-2026-31545,\nCVE-2026-31546, CVE-2026-31548, CVE-2026-31549, CVE-2026-31550,\nCVE-2026-31551, CVE-2026-31552, CVE-2026-31554, CVE-2026-31555,\nCVE-2026-31556, CVE-2026-31557, CVE-2026-31563, CVE-2026-31565,\nCVE-2026-31566, CVE-2026-31570, CVE-2026-31575, CVE-2026-31576,\nCVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581,\nCVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585,\nCVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590,\nCVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597,\nCVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603,\nCVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31610,\nCVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31615,\nCVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619,\nCVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625,\nCVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629,\nCVE-2026-31634, CVE-2026-31638, CVE-2026-31639, CVE-2026-31642,\nCVE-2026-31645, CVE-2026-31646, CVE-2026-31648, CVE-2026-31651,\nCVE-2026-31655, CVE-2026-31656, CVE-2026-31658, CVE-2026-31660,\nCVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665,\nCVE-2026-31667, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672,\nCVE-2026-31673, CVE-2026-31674, CVE-2026-31675, CVE-2026-31677,\nCVE-2026-31678, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,\nCVE-2026-31683, CVE-2026-31684, CVE-2026-31686, CVE-2026-31689,\nCVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,\nCVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701,\nCVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706,\nCVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711,\nCVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716,\nCVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723,\nCVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728,\nCVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737,\nCVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747,\nCVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,\nCVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,\nCVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,\nCVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772,\nCVE-2026-31773, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780,\nCVE-2026-31781, CVE-2026-31788, CVE-2026-43007, CVE-2026-43012,\nCVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016,\nCVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020,\nCVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026,\nCVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,\nCVE-2026-43035, CVE-2026-43036, CVE-2026-43040, CVE-2026-43041,\nCVE-2026-43043, CVE-2026-43044, CVE-2026-43046, CVE-2026-43047,\nCVE-2026-43049, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052,\nCVE-2026-43054, CVE-2026-43056, CVE-2026-43057, CVE-2026-43058,\nCVE-2026-43059, CVE-2026-43060, CVE-2026-43061, CVE-2026-43062,\nCVE-2026-43064, CVE-2026-43065, CVE-2026-43066, CVE-2026-43068,\nCVE-2026-43069, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074,\nCVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080,\nCVE-2026-43081, CVE-2026-43082, CVE-2026-43084, CVE-2026-43085,\nCVE-2026-43086, CVE-2026-43088, CVE-2026-43089, CVE-2026-43091,\nCVE-2026-43092, CVE-2026-43093, CVE-2026-43094, CVE-2026-43098,\nCVE-2026-43099, CVE-2026-43103, CVE-2026-43104, CVE-2026-43105,\nCVE-2026-43107, CVE-2026-43109, CVE-2026-43110, CVE-2026-43111,\nCVE-2026-43112, CVE-2026-43113, CVE-2026-43119, CVE-2026-43120,\nCVE-2026-43129, CVE-2026-43162, CVE-2026-43245, CVE-2026-43252,\nCVE-2026-43265, CVE-2026-43281, CVE-2026-43324, CVE-2026-43327,\nCVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332,\nCVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338,\nCVE-2026-43339, CVE-2026-43340, CVE-2026-43342, CVE-2026-43343,\nCVE-2026-43345, CVE-2026-43350, CVE-2026-43355, CVE-2026-43357,\nCVE-2026-43359, CVE-2026-43360, CVE-2026-43361, CVE-2026-43362,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43371, CVE-2026-43372, CVE-2026-43373,\nCVE-2026-43377, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43386, CVE-2026-43387, CVE-2026-43395, CVE-2026-43397,\nCVE-2026-43405, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43415, CVE-2026-43419,\nCVE-2026-43420, CVE-2026-43421, CVE-2026-43424, CVE-2026-43425,\nCVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429,\nCVE-2026-43430, CVE-2026-43432, CVE-2026-43436, CVE-2026-43437,\nCVE-2026-43439, CVE-2026-43441, CVE-2026-43445, CVE-2026-43448,\nCVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,\nCVE-2026-43453, CVE-2026-43455, CVE-2026-43456, CVE-2026-43457,\nCVE-2026-43458, CVE-2026-43459, CVE-2026-43466, CVE-2026-43467,\nCVE-2026-43468, CVE-2026-43469, CVE-2026-43471, CVE-2026-43472,\nCVE-2026-43473, CVE-2026-43475, CVE-2026-43476, CVE-2026-43480,\nCVE-2026-43483, CVE-2026-43484, CVE-2026-43488, CVE-2026-43490,\nCVE-2026-43491, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43499, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,\nCVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,\nCVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45855,\nCVE-2026-45858, CVE-2026-45899, CVE-2026-45911, CVE-2026-45920,\nCVE-2026-45924, CVE-2026-45942, CVE-2026-45943, CVE-2026-45956,\nCVE-2026-45958, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987,\nCVE-2026-45989, CVE-2026-45991, CVE-2026-45994, CVE-2026-45996,\nCVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003,\nCVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007,\nCVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015,\nCVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021,\nCVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026,\nCVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037,\nCVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46120, CVE-2026-46121,\nCVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125,\nCVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129,\nCVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46136,\nCVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142,\nCVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161,\nCVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174,\nCVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179,\nCVE-2026-46180, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46194, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198,\nCVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46204,\nCVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208,\nCVE-2026-46209, CVE-2026-46211, CVE-2026-46212, CVE-2026-46214,\nCVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46225,\nCVE-2026-46226, CVE-2026-46227, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46241,\nCVE-2026-46273, CVE-2026-46274, CVE-2026-46280, CVE-2026-46282,\nCVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46291,\nCVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296,\nCVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314,\nCVE-2026-46319, CVE-2026-52911, CVE-2026-52920, CVE-2026-52925,\nCVE-2026-52933, CVE-2026-52936, CVE-2026-52951, CVE-2026-52954,\nCVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52961,\nCVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52967,\nCVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52974,\nCVE-2026-52975, CVE-2026-52977, CVE-2026-52981, CVE-2026-52982,\nCVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,\nCVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,\nCVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015,\nCVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,\nCVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035,\nCVE-2026-53036, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,\nCVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,\nCVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,\nCVE-2026-53052, CVE-2026-53056, CVE-2026-53058, CVE-2026-53059,\nCVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063,\nCVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53068,\nCVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53088, CVE-2026-53093, CVE-2026-53094,\nCVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53110,\nCVE-2026-53111, CVE-2026-53112, CVE-2026-53115, CVE-2026-53117,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53126, CVE-2026-53128,\nCVE-2026-53130, CVE-2026-53279, CVE-2026-53287, CVE-2026-53289,\nCVE-2026-53291, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295,\nCVE-2026-53296, CVE-2026-53303, CVE-2026-53304, CVE-2026-53306,\nCVE-2026-53309, CVE-2026-53314, CVE-2026-53320, CVE-2026-53369,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53379,\nCVE-2026-63838, CVE-2026-63843, CVE-2026-63844, CVE-2026-63845,\nCVE-2026-63846, CVE-2026-63847, CVE-2026-63848, CVE-2026-63851,\nCVE-2026-63852, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63860, CVE-2026-63861, CVE-2026-63862, CVE-2026-63865,\nCVE-2026-64164)\n","status":"published","published":"2026-07-28T07:25:50Z","modified":"2026-11-09T12:49:11.651297869Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8596-1","title":"linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23226, CVE-2026-23227, CVE-2026-23244, CVE-2026-23245,\nCVE-2026-23246, CVE-2026-23253, CVE-2026-23255, CVE-2026-23270,\nCVE-2026-23271, CVE-2026-23276, CVE-2026-23277, CVE-2026-23279,\nCVE-2026-23281, CVE-2026-23284, CVE-2026-23285, CVE-2026-23286,\nCVE-2026-23287, CVE-2026-23289, CVE-2026-23290, CVE-2026-23291,\nCVE-2026-23292, CVE-2026-23293, CVE-2026-23296, CVE-2026-23298,\nCVE-2026-23300, CVE-2026-23302, CVE-2026-23303, CVE-2026-23304,\nCVE-2026-23306, CVE-2026-23307, CVE-2026-23308, CVE-2026-23310,\nCVE-2026-23312, CVE-2026-23313, CVE-2026-23315, CVE-2026-23317,\nCVE-2026-23318, CVE-2026-23319, CVE-2026-23321, CVE-2026-23324,\nCVE-2026-23325, CVE-2026-23330, CVE-2026-23334, CVE-2026-23335,\nCVE-2026-23336, CVE-2026-23339, CVE-2026-23340, CVE-2026-23343,\nCVE-2026-23347, CVE-2026-23352, CVE-2026-23356, CVE-2026-23357,\nCVE-2026-23359, CVE-2026-23360, CVE-2026-23361, CVE-2026-23362,\nCVE-2026-23363, CVE-2026-23364, CVE-2026-23365, CVE-2026-23367,\nCVE-2026-23368, CVE-2026-23369, CVE-2026-23370, CVE-2026-23372,\nCVE-2026-23374, CVE-2026-23375, CVE-2026-23378, CVE-2026-23379,\nCVE-2026-23381, CVE-2026-23382, CVE-2026-23383, CVE-2026-23386,\nCVE-2026-23387, CVE-2026-23388, CVE-2026-23389, CVE-2026-23391,\nCVE-2026-23395, CVE-2026-23396, CVE-2026-23397, CVE-2026-23398,\nCVE-2026-23399, CVE-2026-23401, CVE-2026-23412, CVE-2026-23413,\nCVE-2026-23414, CVE-2026-23418, CVE-2026-23419, CVE-2026-23420,\nCVE-2026-23426, CVE-2026-23434, CVE-2026-23438, CVE-2026-23439,\nCVE-2026-23440, CVE-2026-23441, CVE-2026-23442, CVE-2026-23444,\nCVE-2026-23446, CVE-2026-23447, CVE-2026-23448, CVE-2026-23449,\nCVE-2026-23452, CVE-2026-23454, CVE-2026-23456, CVE-2026-23457,\nCVE-2026-23458, CVE-2026-23460, CVE-2026-23461, CVE-2026-23462,\nCVE-2026-23463, CVE-2026-23464, CVE-2026-23465, CVE-2026-23468,\nCVE-2026-23470, CVE-2026-23474, CVE-2026-23475, CVE-2026-31389,\nCVE-2026-31391, CVE-2026-31392, CVE-2026-31393, CVE-2026-31394,\nCVE-2026-31396, CVE-2026-31399, CVE-2026-31400, CVE-2026-31403,\nCVE-2026-31405, CVE-2026-31407, CVE-2026-31408, CVE-2026-31409,\nCVE-2026-31412, CVE-2026-31413, CVE-2026-31414, CVE-2026-31415,\nCVE-2026-31416, CVE-2026-31417, CVE-2026-31421, CVE-2026-31422,\nCVE-2026-31423, CVE-2026-31424, CVE-2026-31425, CVE-2026-31426,\nCVE-2026-31427, CVE-2026-31428, CVE-2026-31429, CVE-2026-31430,\nCVE-2026-31432, CVE-2026-31433, CVE-2026-31434, CVE-2026-31438,\nCVE-2026-31439, CVE-2026-31440, CVE-2026-31441, CVE-2026-31446,\nCVE-2026-31447, CVE-2026-31449, CVE-2026-31450, CVE-2026-31451,\nCVE-2026-31452, CVE-2026-31453, CVE-2026-31454, CVE-2026-31455,\nCVE-2026-31458, CVE-2026-31464, CVE-2026-31466, CVE-2026-31467,\nCVE-2026-31469, CVE-2026-31470, CVE-2026-31473, CVE-2026-31474,\nCVE-2026-31476, CVE-2026-31477, CVE-2026-31480, CVE-2026-31482,\nCVE-2026-31483, CVE-2026-31485, CVE-2026-31487, CVE-2026-31488,\nCVE-2026-31489, CVE-2026-31492, CVE-2026-31494, CVE-2026-31495,\nCVE-2026-31496, CVE-2026-31497, CVE-2026-31498, CVE-2026-31499,\nCVE-2026-31500, CVE-2026-31502, CVE-2026-31503, CVE-2026-31505,\nCVE-2026-31506, CVE-2026-31507, CVE-2026-31508, CVE-2026-31509,\nCVE-2026-31510, CVE-2026-31511, CVE-2026-31512, CVE-2026-31515,\nCVE-2026-31516, CVE-2026-31518, CVE-2026-31519, CVE-2026-31520,\nCVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524,\nCVE-2026-31525, CVE-2026-31527, CVE-2026-31528, CVE-2026-31530,\nCVE-2026-31532, CVE-2026-31540, CVE-2026-31542, CVE-2026-31545,\nCVE-2026-31546, CVE-2026-31548, CVE-2026-31549, CVE-2026-31550,\nCVE-2026-31551, CVE-2026-31552, CVE-2026-31554, CVE-2026-31555,\nCVE-2026-31556, CVE-2026-31557, CVE-2026-31563, CVE-2026-31565,\nCVE-2026-31566, CVE-2026-31570, CVE-2026-31575, CVE-2026-31576,\nCVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581,\nCVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585,\nCVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590,\nCVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597,\nCVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603,\nCVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31610,\nCVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31615,\nCVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619,\nCVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625,\nCVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629,\nCVE-2026-31634, CVE-2026-31638, CVE-2026-31639, CVE-2026-31642,\nCVE-2026-31645, CVE-2026-31646, CVE-2026-31648, CVE-2026-31651,\nCVE-2026-31655, CVE-2026-31656, CVE-2026-31658, CVE-2026-31660,\nCVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665,\nCVE-2026-31667, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672,\nCVE-2026-31673, CVE-2026-31674, CVE-2026-31675, CVE-2026-31677,\nCVE-2026-31678, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,\nCVE-2026-31683, CVE-2026-31684, CVE-2026-31686, CVE-2026-31689,\nCVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,\nCVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701,\nCVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706,\nCVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711,\nCVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716,\nCVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723,\nCVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728,\nCVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737,\nCVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747,\nCVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,\nCVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,\nCVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,\nCVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772,\nCVE-2026-31773, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780,\nCVE-2026-31781, CVE-2026-31788, CVE-2026-43007, CVE-2026-43012,\nCVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016,\nCVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020,\nCVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026,\nCVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,\nCVE-2026-43035, CVE-2026-43036, CVE-2026-43040, CVE-2026-43041,\nCVE-2026-43043, CVE-2026-43044, CVE-2026-43046, CVE-2026-43047,\nCVE-2026-43049, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052,\nCVE-2026-43054, CVE-2026-43056, CVE-2026-43057, CVE-2026-43058,\nCVE-2026-43059, CVE-2026-43060, CVE-2026-43061, CVE-2026-43062,\nCVE-2026-43064, CVE-2026-43065, CVE-2026-43066, CVE-2026-43068,\nCVE-2026-43069, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074,\nCVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080,\nCVE-2026-43081, CVE-2026-43082, CVE-2026-43084, CVE-2026-43085,\nCVE-2026-43086, CVE-2026-43088, CVE-2026-43089, CVE-2026-43091,\nCVE-2026-43092, CVE-2026-43093, CVE-2026-43094, CVE-2026-43098,\nCVE-2026-43099, CVE-2026-43103, CVE-2026-43104, CVE-2026-43105,\nCVE-2026-43107, CVE-2026-43109, CVE-2026-43110, CVE-2026-43111,\nCVE-2026-43112, CVE-2026-43113, CVE-2026-43119, CVE-2026-43120,\nCVE-2026-43129, CVE-2026-43162, CVE-2026-43245, CVE-2026-43252,\nCVE-2026-43265, CVE-2026-43281, CVE-2026-43324, CVE-2026-43327,\nCVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332,\nCVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338,\nCVE-2026-43339, CVE-2026-43340, CVE-2026-43342, CVE-2026-43343,\nCVE-2026-43345, CVE-2026-43350, CVE-2026-43355, CVE-2026-43357,\nCVE-2026-43359, CVE-2026-43360, CVE-2026-43361, CVE-2026-43362,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43371, CVE-2026-43372, CVE-2026-43373,\nCVE-2026-43377, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43386, CVE-2026-43387, CVE-2026-43395, CVE-2026-43397,\nCVE-2026-43405, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43415, CVE-2026-43419,\nCVE-2026-43420, CVE-2026-43421, CVE-2026-43424, CVE-2026-43425,\nCVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429,\nCVE-2026-43430, CVE-2026-43432, CVE-2026-43436, CVE-2026-43437,\nCVE-2026-43439, CVE-2026-43441, CVE-2026-43445, CVE-2026-43448,\nCVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,\nCVE-2026-43453, CVE-2026-43455, CVE-2026-43456, CVE-2026-43457,\nCVE-2026-43458, CVE-2026-43459, CVE-2026-43466, CVE-2026-43467,\nCVE-2026-43468, CVE-2026-43469, CVE-2026-43471, CVE-2026-43472,\nCVE-2026-43473, CVE-2026-43475, CVE-2026-43476, CVE-2026-43480,\nCVE-2026-43483, CVE-2026-43484, CVE-2026-43488, CVE-2026-43490,\nCVE-2026-43491, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43499, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,\nCVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,\nCVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45855,\nCVE-2026-45858, CVE-2026-45899, CVE-2026-45911, CVE-2026-45920,\nCVE-2026-45924, CVE-2026-45942, CVE-2026-45943, CVE-2026-45956,\nCVE-2026-45958, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987,\nCVE-2026-45989, CVE-2026-45991, CVE-2026-45994, CVE-2026-45996,\nCVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003,\nCVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007,\nCVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015,\nCVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021,\nCVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026,\nCVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037,\nCVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46120, CVE-2026-46121,\nCVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125,\nCVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129,\nCVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46136,\nCVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142,\nCVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161,\nCVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174,\nCVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179,\nCVE-2026-46180, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46194, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198,\nCVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46204,\nCVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208,\nCVE-2026-46209, CVE-2026-46211, CVE-2026-46212, CVE-2026-46214,\nCVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46225,\nCVE-2026-46226, CVE-2026-46227, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46241,\nCVE-2026-46273, CVE-2026-46274, CVE-2026-46280, CVE-2026-46282,\nCVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46291,\nCVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296,\nCVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314,\nCVE-2026-46319, CVE-2026-52911, CVE-2026-52920, CVE-2026-52925,\nCVE-2026-52933, CVE-2026-52936, CVE-2026-52951, CVE-2026-52954,\nCVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52961,\nCVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52967,\nCVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52974,\nCVE-2026-52975, CVE-2026-52977, CVE-2026-52981, CVE-2026-52982,\nCVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,\nCVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,\nCVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015,\nCVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,\nCVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035,\nCVE-2026-53036, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,\nCVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,\nCVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,\nCVE-2026-53052, CVE-2026-53056, CVE-2026-53058, CVE-2026-53059,\nCVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063,\nCVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53068,\nCVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53088, CVE-2026-53093, CVE-2026-53094,\nCVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53110,\nCVE-2026-53111, CVE-2026-53112, CVE-2026-53115, CVE-2026-53117,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53126, CVE-2026-53128,\nCVE-2026-53130, CVE-2026-53279, CVE-2026-53287, CVE-2026-53289,\nCVE-2026-53291, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295,\nCVE-2026-53296, CVE-2026-53303, CVE-2026-53304, CVE-2026-53306,\nCVE-2026-53309, CVE-2026-53314, CVE-2026-53320, CVE-2026-53354,\nCVE-2026-53369, CVE-2026-53374, CVE-2026-53375, CVE-2026-53376,\nCVE-2026-53379, CVE-2026-63838, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63851, CVE-2026-63852, CVE-2026-63854, CVE-2026-63855,\nCVE-2026-63856, CVE-2026-63860, CVE-2026-63861, CVE-2026-63862,\nCVE-2026-63865, CVE-2026-64164)\n","status":"published","published":"2026-07-23T08:06:00Z","modified":"2026-11-09T12:48:44.712103783Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8606-1","title":"linux-azure, linux-azure-6.8 vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - ATM drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - RNBD block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Clocksource drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - CPU idle management framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Multifunction device drivers;\n  - Broadcom VK accelerator driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MOST (Media Oriented Systems Transport) drivers;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Performance monitor drivers;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - RAS (Reliability, Availability, Serviceability) subsystem;\n  - Remote Processor subsystem;\n  - RPMSG subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - MediaTek SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - Texas Instruments SoC drivers;\n  - SPI subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - ChipIdea USB driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FAT file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - Pstore file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Audit subsystem;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - Kernel kexec() syscall;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Scheduler infrastructure;\n  - Cryptographic library;\n  - Scatterlist API;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Landlock security;\n  - Simplified Mandatory Access Control Kernel framework;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40005, CVE-2025-40135, CVE-2025-40150, CVE-2025-68175,\nCVE-2025-68239, CVE-2025-68334, CVE-2025-68736, CVE-2025-71152,\nCVE-2025-71161, CVE-2025-71203, CVE-2025-71221, CVE-2025-71229,\nCVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235,\nCVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239,\nCVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71269,\nCVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286,\nCVE-2025-71287, CVE-2025-71288, CVE-2025-71291, CVE-2025-71292,\nCVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304,\nCVE-2025-71305, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23100, CVE-2026-23104,\nCVE-2026-23118, CVE-2026-23138, CVE-2026-23154, CVE-2026-23157,\nCVE-2026-23169, CVE-2026-23171, CVE-2026-23207, CVE-2026-23220,\nCVE-2026-23221, CVE-2026-23222, CVE-2026-23226, CVE-2026-23227,\nCVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233,\nCVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237,\nCVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243,\nCVE-2026-23244, CVE-2026-23245, CVE-2026-23246, CVE-2026-23249,\nCVE-2026-23253, CVE-2026-23255, CVE-2026-23266, CVE-2026-23267,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23272, CVE-2026-23276,\nCVE-2026-23277, CVE-2026-23278, CVE-2026-23279, CVE-2026-23281,\nCVE-2026-23284, CVE-2026-23285, CVE-2026-23286, CVE-2026-23287,\nCVE-2026-23289, CVE-2026-23290, CVE-2026-23291, CVE-2026-23292,\nCVE-2026-23293, CVE-2026-23296, CVE-2026-23298, CVE-2026-23300,\nCVE-2026-23302, CVE-2026-23303, CVE-2026-23304, CVE-2026-23306,\nCVE-2026-23307, CVE-2026-23308, CVE-2026-23310, CVE-2026-23312,\nCVE-2026-23313, CVE-2026-23315, CVE-2026-23317, CVE-2026-23318,\nCVE-2026-23319, CVE-2026-23321, CVE-2026-23324, CVE-2026-23325,\nCVE-2026-23330, CVE-2026-23334, CVE-2026-23335, CVE-2026-23336,\nCVE-2026-23339, CVE-2026-23340, CVE-2026-23343, CVE-2026-23347,\nCVE-2026-23352, CVE-2026-23356, CVE-2026-23357, CVE-2026-23359,\nCVE-2026-23360, CVE-2026-23361, CVE-2026-23362, CVE-2026-23363,\nCVE-2026-23364, CVE-2026-23365, CVE-2026-23367, CVE-2026-23368,\nCVE-2026-23369, CVE-2026-23370, CVE-2026-23372, CVE-2026-23374,\nCVE-2026-23375, CVE-2026-23378, CVE-2026-23379, CVE-2026-23381,\nCVE-2026-23382, CVE-2026-23383, CVE-2026-23386, CVE-2026-23387,\nCVE-2026-23388, CVE-2026-23389, CVE-2026-23391, CVE-2026-23392,\nCVE-2026-23395, CVE-2026-23396, CVE-2026-23397, CVE-2026-23398,\nCVE-2026-23399, CVE-2026-23401, CVE-2026-23412, CVE-2026-23413,\nCVE-2026-23414, CVE-2026-23418, CVE-2026-23419, CVE-2026-23420,\nCVE-2026-23426, CVE-2026-23428, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23450, CVE-2026-23452, CVE-2026-23454,\nCVE-2026-23455, CVE-2026-23456, CVE-2026-23457, CVE-2026-23458,\nCVE-2026-23460, CVE-2026-23461, CVE-2026-23462, CVE-2026-23463,\nCVE-2026-23464, CVE-2026-23465, CVE-2026-23468, CVE-2026-23470,\nCVE-2026-23474, CVE-2026-23475, CVE-2026-31389, CVE-2026-31391,\nCVE-2026-31392, CVE-2026-31393, CVE-2026-31394, CVE-2026-31396,\nCVE-2026-31399, CVE-2026-31400, CVE-2026-31402, CVE-2026-31403,\nCVE-2026-31405, CVE-2026-31407, CVE-2026-31408, CVE-2026-31409,\nCVE-2026-31411, CVE-2026-31412, CVE-2026-31414, CVE-2026-31415,\nCVE-2026-31416, CVE-2026-31417, CVE-2026-31418, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31436, CVE-2026-31438, CVE-2026-31439, CVE-2026-31440,\nCVE-2026-31441, CVE-2026-31446, CVE-2026-31447, CVE-2026-31448,\nCVE-2026-31449, CVE-2026-31450, CVE-2026-31451, CVE-2026-31452,\nCVE-2026-31453, CVE-2026-31454, CVE-2026-31455, CVE-2026-31458,\nCVE-2026-31464, CVE-2026-31466, CVE-2026-31467, CVE-2026-31469,\nCVE-2026-31470, CVE-2026-31473, CVE-2026-31474, CVE-2026-31476,\nCVE-2026-31477, CVE-2026-31478, CVE-2026-31480, CVE-2026-31482,\nCVE-2026-31483, CVE-2026-31485, CVE-2026-31487, CVE-2026-31488,\nCVE-2026-31489, CVE-2026-31492, CVE-2026-31494, CVE-2026-31495,\nCVE-2026-31496, CVE-2026-31497, CVE-2026-31498, CVE-2026-31499,\nCVE-2026-31500, CVE-2026-31502, CVE-2026-31503, CVE-2026-31505,\nCVE-2026-31506, CVE-2026-31507, CVE-2026-31508, CVE-2026-31509,\nCVE-2026-31510, CVE-2026-31511, CVE-2026-31512, CVE-2026-31515,\nCVE-2026-31516, CVE-2026-31518, CVE-2026-31519, CVE-2026-31520,\nCVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524,\nCVE-2026-31525, CVE-2026-31527, CVE-2026-31528, CVE-2026-31530,\nCVE-2026-31532, CVE-2026-31540, CVE-2026-31542, CVE-2026-31545,\nCVE-2026-31546, CVE-2026-31548, CVE-2026-31549, CVE-2026-31550,\nCVE-2026-31551, CVE-2026-31552, CVE-2026-31554, CVE-2026-31555,\nCVE-2026-31556, CVE-2026-31557, CVE-2026-31563, CVE-2026-31565,\nCVE-2026-31566, CVE-2026-31570, CVE-2026-31575, CVE-2026-31576,\nCVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581,\nCVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585,\nCVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590,\nCVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597,\nCVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603,\nCVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607,\nCVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613,\nCVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618,\nCVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,\nCVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628,\nCVE-2026-31629, CVE-2026-31634, CVE-2026-31637, CVE-2026-31638,\nCVE-2026-31639, CVE-2026-31642, CVE-2026-31645, CVE-2026-31646,\nCVE-2026-31648, CVE-2026-31649, CVE-2026-31651, CVE-2026-31655,\nCVE-2026-31656, CVE-2026-31657, CVE-2026-31658, CVE-2026-31659,\nCVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664,\nCVE-2026-31665, CVE-2026-31667, CVE-2026-31668, CVE-2026-31669,\nCVE-2026-31670, CVE-2026-31671, CVE-2026-31672, CVE-2026-31673,\nCVE-2026-31674, CVE-2026-31675, CVE-2026-31677, CVE-2026-31678,\nCVE-2026-31679, CVE-2026-31680, CVE-2026-31681, CVE-2026-31682,\nCVE-2026-31683, CVE-2026-31684, CVE-2026-31685, CVE-2026-31686,\nCVE-2026-31687, CVE-2026-31689, CVE-2026-31693, CVE-2026-31694,\nCVE-2026-31695, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698,\nCVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702,\nCVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31714, CVE-2026-31715, CVE-2026-31716, CVE-2026-31720,\nCVE-2026-31721, CVE-2026-31722, CVE-2026-31723, CVE-2026-31724,\nCVE-2026-31725, CVE-2026-31726, CVE-2026-31728, CVE-2026-31729,\nCVE-2026-31730, CVE-2026-31731, CVE-2026-31737, CVE-2026-31738,\nCVE-2026-31740, CVE-2026-31741, CVE-2026-31747, CVE-2026-31748,\nCVE-2026-31749, CVE-2026-31751, CVE-2026-31752, CVE-2026-31754,\nCVE-2026-31755, CVE-2026-31756, CVE-2026-31758, CVE-2026-31759,\nCVE-2026-31761, CVE-2026-31762, CVE-2026-31763, CVE-2026-31767,\nCVE-2026-31768, CVE-2026-31770, CVE-2026-31772, CVE-2026-31773,\nCVE-2026-31778, CVE-2026-31779, CVE-2026-31780, CVE-2026-31781,\nCVE-2026-31788, CVE-2026-43007, CVE-2026-43011, CVE-2026-43012,\nCVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016,\nCVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020,\nCVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026,\nCVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,\nCVE-2026-43035, CVE-2026-43036, CVE-2026-43037, CVE-2026-43038,\nCVE-2026-43040, CVE-2026-43041, CVE-2026-43043, CVE-2026-43044,\nCVE-2026-43046, CVE-2026-43047, CVE-2026-43049, CVE-2026-43050,\nCVE-2026-43051, CVE-2026-43052, CVE-2026-43054, CVE-2026-43056,\nCVE-2026-43057, CVE-2026-43058, CVE-2026-43059, CVE-2026-43060,\nCVE-2026-43061, CVE-2026-43062, CVE-2026-43064, CVE-2026-43065,\nCVE-2026-43066, CVE-2026-43068, CVE-2026-43069, CVE-2026-43071,\nCVE-2026-43072, CVE-2026-43073, CVE-2026-43074, CVE-2026-43075,\nCVE-2026-43076, CVE-2026-43079, CVE-2026-43080, CVE-2026-43081,\nCVE-2026-43082, CVE-2026-43085, CVE-2026-43086, CVE-2026-43088,\nCVE-2026-43089, CVE-2026-43091, CVE-2026-43092, CVE-2026-43093,\nCVE-2026-43094, CVE-2026-43098, CVE-2026-43099, CVE-2026-43103,\nCVE-2026-43104, CVE-2026-43105, CVE-2026-43107, CVE-2026-43109,\nCVE-2026-43110, CVE-2026-43111, CVE-2026-43112, CVE-2026-43113,\nCVE-2026-43114, CVE-2026-43117, CVE-2026-43119, CVE-2026-43120,\nCVE-2026-43123, CVE-2026-43124, CVE-2026-43128, CVE-2026-43129,\nCVE-2026-43130, CVE-2026-43132, CVE-2026-43133, CVE-2026-43134,\nCVE-2026-43135, CVE-2026-43136, CVE-2026-43137, CVE-2026-43139,\nCVE-2026-43140, CVE-2026-43141, CVE-2026-43143, CVE-2026-43145,\nCVE-2026-43147, CVE-2026-43148, CVE-2026-43149, CVE-2026-43150,\nCVE-2026-43152, CVE-2026-43153, CVE-2026-43156, CVE-2026-43157,\nCVE-2026-43158, CVE-2026-43159, CVE-2026-43162, CVE-2026-43163,\nCVE-2026-43167, CVE-2026-43168, CVE-2026-43169, CVE-2026-43170,\nCVE-2026-43171, CVE-2026-43173, CVE-2026-43175, CVE-2026-43180,\nCVE-2026-43182, CVE-2026-43183, CVE-2026-43184, CVE-2026-43185,\nCVE-2026-43186, CVE-2026-43187, CVE-2026-43189, CVE-2026-43190,\nCVE-2026-43194, CVE-2026-43196, CVE-2026-43199, CVE-2026-43200,\nCVE-2026-43201, CVE-2026-43202, CVE-2026-43203, CVE-2026-43205,\nCVE-2026-43206, CVE-2026-43207, CVE-2026-43209, CVE-2026-43211,\nCVE-2026-43212, CVE-2026-43214, CVE-2026-43215, CVE-2026-43218,\nCVE-2026-43221, CVE-2026-43222, CVE-2026-43223, CVE-2026-43225,\nCVE-2026-43226, CVE-2026-43227, CVE-2026-43230, CVE-2026-43231,\nCVE-2026-43232, CVE-2026-43233, CVE-2026-43236, CVE-2026-43238,\nCVE-2026-43239, CVE-2026-43241, CVE-2026-43242, CVE-2026-43244,\nCVE-2026-43245, CVE-2026-43246, CVE-2026-43248, CVE-2026-43249,\nCVE-2026-43250, CVE-2026-43251, CVE-2026-43252, CVE-2026-43253,\nCVE-2026-43255, CVE-2026-43256, CVE-2026-43257, CVE-2026-43258,\nCVE-2026-43261, CVE-2026-43262, CVE-2026-43264, CVE-2026-43265,\nCVE-2026-43266, CVE-2026-43268, CVE-2026-43269, CVE-2026-43270,\nCVE-2026-43271, CVE-2026-43273, CVE-2026-43275, CVE-2026-43277,\nCVE-2026-43278, CVE-2026-43279, CVE-2026-43281, CVE-2026-43283,\nCVE-2026-43287, CVE-2026-43288, CVE-2026-43289, CVE-2026-43291,\nCVE-2026-43295, CVE-2026-43296, CVE-2026-43297, CVE-2026-43300,\nCVE-2026-43302, CVE-2026-43304, CVE-2026-43312, CVE-2026-43313,\nCVE-2026-43314, CVE-2026-43315, CVE-2026-43316, CVE-2026-43317,\nCVE-2026-43318, CVE-2026-43319, CVE-2026-43320, CVE-2026-43324,\nCVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330,\nCVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,\nCVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43341,\nCVE-2026-43342, CVE-2026-43343, CVE-2026-43345, CVE-2026-43350,\nCVE-2026-43355, CVE-2026-43357, CVE-2026-43359, CVE-2026-43360,\nCVE-2026-43361, CVE-2026-43363, CVE-2026-43365, CVE-2026-43366,\nCVE-2026-43368, CVE-2026-43370, CVE-2026-43372, CVE-2026-43373,\nCVE-2026-43377, CVE-2026-43378, CVE-2026-43380, CVE-2026-43381,\nCVE-2026-43382, CVE-2026-43383, CVE-2026-43384, CVE-2026-43386,\nCVE-2026-43387, CVE-2026-43395, CVE-2026-43397, CVE-2026-43405,\nCVE-2026-43406, CVE-2026-43407, CVE-2026-43408, CVE-2026-43409,\nCVE-2026-43411, CVE-2026-43412, CVE-2026-43413, CVE-2026-43414,\nCVE-2026-43415, CVE-2026-43419, CVE-2026-43420, CVE-2026-43421,\nCVE-2026-43424, CVE-2026-43425, CVE-2026-43426, CVE-2026-43427,\nCVE-2026-43428, CVE-2026-43429, CVE-2026-43430, CVE-2026-43432,\nCVE-2026-43436, CVE-2026-43437, CVE-2026-43439, CVE-2026-43441,\nCVE-2026-43445, CVE-2026-43448, CVE-2026-43449, CVE-2026-43450,\nCVE-2026-43451, CVE-2026-43452, CVE-2026-43453, CVE-2026-43455,\nCVE-2026-43456, CVE-2026-43457, CVE-2026-43458, CVE-2026-43459,\nCVE-2026-43466, CVE-2026-43467, CVE-2026-43468, CVE-2026-43469,\nCVE-2026-43471, CVE-2026-43472, CVE-2026-43473, CVE-2026-43475,\nCVE-2026-43476, CVE-2026-43480, CVE-2026-43483, CVE-2026-43484,\nCVE-2026-43488, CVE-2026-43490, CVE-2026-43491, CVE-2026-43492,\nCVE-2026-43493, CVE-2026-43495, CVE-2026-43496, CVE-2026-43497,\nCVE-2026-43499, CVE-2026-43501, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,\nCVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,\nCVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45847,\nCVE-2026-45848, CVE-2026-45849, CVE-2026-45851, CVE-2026-45852,\nCVE-2026-45855, CVE-2026-45856, CVE-2026-45857, CVE-2026-45858,\nCVE-2026-45859, CVE-2026-45860, CVE-2026-45861, CVE-2026-45862,\nCVE-2026-45864, CVE-2026-45865, CVE-2026-45866, CVE-2026-45867,\nCVE-2026-45868, CVE-2026-45869, CVE-2026-45870, CVE-2026-45871,\nCVE-2026-45872, CVE-2026-45873, CVE-2026-45875, CVE-2026-45877,\nCVE-2026-45878, CVE-2026-45879, CVE-2026-45880, CVE-2026-45881,\nCVE-2026-45882, CVE-2026-45883, CVE-2026-45884, CVE-2026-45885,\nCVE-2026-45886, CVE-2026-45890, CVE-2026-45891, CVE-2026-45893,\nCVE-2026-45895, CVE-2026-45899, CVE-2026-45902, CVE-2026-45904,\nCVE-2026-45905, CVE-2026-45910, CVE-2026-45911, CVE-2026-45912,\nCVE-2026-45913, CVE-2026-45914, CVE-2026-45915, CVE-2026-45916,\nCVE-2026-45917, CVE-2026-45919, CVE-2026-45920, CVE-2026-45921,\nCVE-2026-45923, CVE-2026-45924, CVE-2026-45928, CVE-2026-45935,\nCVE-2026-45936, CVE-2026-45938, CVE-2026-45941, CVE-2026-45942,\nCVE-2026-45943, CVE-2026-45946, CVE-2026-45947, CVE-2026-45948,\nCVE-2026-45954, CVE-2026-45956, CVE-2026-45957, CVE-2026-45958,\nCVE-2026-45960, CVE-2026-45962, CVE-2026-45964, CVE-2026-45965,\nCVE-2026-45968, CVE-2026-45969, CVE-2026-45970, CVE-2026-45972,\nCVE-2026-45973, CVE-2026-45974, CVE-2026-45976, CVE-2026-45978,\nCVE-2026-45981, CVE-2026-45982, CVE-2026-45983, CVE-2026-45984,\nCVE-2026-45985, CVE-2026-45986, CVE-2026-45987, CVE-2026-45988,\nCVE-2026-45989, CVE-2026-45991, CVE-2026-45994, CVE-2026-45996,\nCVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003,\nCVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007,\nCVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015,\nCVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021,\nCVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026,\nCVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037,\nCVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46043,\nCVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049,\nCVE-2026-46050, CVE-2026-46051, CVE-2026-46052, CVE-2026-46053,\nCVE-2026-46056, CVE-2026-46058, CVE-2026-46061, CVE-2026-46062,\nCVE-2026-46063, CVE-2026-46064, CVE-2026-46065, CVE-2026-46068,\nCVE-2026-46069, CVE-2026-46070, CVE-2026-46072, CVE-2026-46073,\nCVE-2026-46075, CVE-2026-46076, CVE-2026-46077, CVE-2026-46078,\nCVE-2026-46079, CVE-2026-46080, CVE-2026-46082, CVE-2026-46083,\nCVE-2026-46084, CVE-2026-46086, CVE-2026-46088, CVE-2026-46089,\nCVE-2026-46090, CVE-2026-46091, CVE-2026-46092, CVE-2026-46094,\nCVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102,\nCVE-2026-46103, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108,\nCVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113,\nCVE-2026-46114, CVE-2026-46115, CVE-2026-46116, CVE-2026-46117,\nCVE-2026-46119, CVE-2026-46120, CVE-2026-46121, CVE-2026-46122,\nCVE-2026-46123, CVE-2026-46124, CVE-2026-46125, CVE-2026-46126,\nCVE-2026-46127, CVE-2026-46128, CVE-2026-46129, CVE-2026-46131,\nCVE-2026-46132, CVE-2026-46133, CVE-2026-46135, CVE-2026-46136,\nCVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142,\nCVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161,\nCVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174,\nCVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179,\nCVE-2026-46180, CVE-2026-46184, CVE-2026-46185, CVE-2026-46186,\nCVE-2026-46187, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46194, CVE-2026-46195, CVE-2026-46196,\nCVE-2026-46197, CVE-2026-46198, CVE-2026-46199, CVE-2026-46200,\nCVE-2026-46201, CVE-2026-46204, CVE-2026-46205, CVE-2026-46206,\nCVE-2026-46207, CVE-2026-46208, CVE-2026-46209, CVE-2026-46211,\nCVE-2026-46212, CVE-2026-46214, CVE-2026-46218, CVE-2026-46219,\nCVE-2026-46220, CVE-2026-46225, CVE-2026-46226, CVE-2026-46227,\nCVE-2026-46229, CVE-2026-46230, CVE-2026-46231, CVE-2026-46232,\nCVE-2026-46233, CVE-2026-46234, CVE-2026-46235, CVE-2026-46236,\nCVE-2026-46238, CVE-2026-46241, CVE-2026-46243, CVE-2026-46244,\nCVE-2026-46246, CVE-2026-46247, CVE-2026-46249, CVE-2026-46250,\nCVE-2026-46251, CVE-2026-46253, CVE-2026-46254, CVE-2026-46255,\nCVE-2026-46259, CVE-2026-46260, CVE-2026-46261, CVE-2026-46265,\nCVE-2026-46266, CVE-2026-46267, CVE-2026-46270, CVE-2026-46273,\nCVE-2026-46274, CVE-2026-46280, CVE-2026-46282, CVE-2026-46285,\nCVE-2026-46286, CVE-2026-46287, CVE-2026-46289, CVE-2026-46291,\nCVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296,\nCVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314,\nCVE-2026-46319, CVE-2026-46328, CVE-2026-52911, CVE-2026-52920,\nCVE-2026-52925, CVE-2026-52933, CVE-2026-52936, CVE-2026-52951,\nCVE-2026-52954, CVE-2026-52955, CVE-2026-52957, CVE-2026-52958,\nCVE-2026-52961, CVE-2026-52962, CVE-2026-52963, CVE-2026-52964,\nCVE-2026-52967, CVE-2026-52968, CVE-2026-52969, CVE-2026-52970,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52977, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986,\nCVE-2026-52989, CVE-2026-52990, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52995, CVE-2026-52998, CVE-2026-52999, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53006,\nCVE-2026-53011, CVE-2026-53012, CVE-2026-53013, CVE-2026-53014,\nCVE-2026-53015, CVE-2026-53016, CVE-2026-53021, CVE-2026-53022,\nCVE-2026-53023, CVE-2026-53032, CVE-2026-53033, CVE-2026-53034,\nCVE-2026-53035, CVE-2026-53036, CVE-2026-53037, CVE-2026-53039,\nCVE-2026-53040, CVE-2026-53041, CVE-2026-53043, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53052, CVE-2026-53056, CVE-2026-53058,\nCVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062,\nCVE-2026-53063, CVE-2026-53064, CVE-2026-53065, CVE-2026-53066,\nCVE-2026-53068, CVE-2026-53069, CVE-2026-53071, CVE-2026-53072,\nCVE-2026-53073, CVE-2026-53074, CVE-2026-53075, CVE-2026-53076,\nCVE-2026-53077, CVE-2026-53082, CVE-2026-53083, CVE-2026-53084,\nCVE-2026-53085, CVE-2026-53086, CVE-2026-53088, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53096, CVE-2026-53097, CVE-2026-53098,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53115,\nCVE-2026-53117, CVE-2026-53122, CVE-2026-53123, CVE-2026-53126,\nCVE-2026-53128, CVE-2026-53130, CVE-2026-53279, CVE-2026-53287,\nCVE-2026-53289, CVE-2026-53291, CVE-2026-53293, CVE-2026-53294,\nCVE-2026-53295, CVE-2026-53296, CVE-2026-53303, CVE-2026-53304,\nCVE-2026-53306, CVE-2026-53309, CVE-2026-53314, CVE-2026-53320,\nCVE-2026-53369, CVE-2026-53374, CVE-2026-53375, CVE-2026-53376,\nCVE-2026-53379, CVE-2026-63838, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63851, CVE-2026-63852, CVE-2026-63854, CVE-2026-63855,\nCVE-2026-63856, CVE-2026-63860, CVE-2026-63861, CVE-2026-63862,\nCVE-2026-63865, CVE-2026-64018, CVE-2026-64034)\n","status":"published","published":"2026-07-24T10:17:16Z","modified":"2026-11-07T01:46:10.910402805Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8607-1","title":"linux-azure-fde vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - ATM drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - RNBD block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Clocksource drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - CPU idle management framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Multifunction device drivers;\n  - Broadcom VK accelerator driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MOST (Media Oriented Systems Transport) drivers;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Performance monitor drivers;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - RAS (Reliability, Availability, Serviceability) subsystem;\n  - Remote Processor subsystem;\n  - RPMSG subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - MediaTek SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - Texas Instruments SoC drivers;\n  - SPI subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - ChipIdea USB driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FAT file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - Pstore file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Audit subsystem;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - Kernel kexec() syscall;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Scheduler infrastructure;\n  - Cryptographic library;\n  - Scatterlist API;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Landlock security;\n  - Simplified Mandatory Access Control Kernel framework;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40005, CVE-2025-40135, CVE-2025-40150, CVE-2025-68175,\nCVE-2025-68239, CVE-2025-68334, CVE-2025-68736, CVE-2025-71152,\nCVE-2025-71161, CVE-2025-71203, CVE-2025-71221, CVE-2025-71229,\nCVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235,\nCVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239,\nCVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71269,\nCVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286,\nCVE-2025-71287, CVE-2025-71288, CVE-2025-71291, CVE-2025-71292,\nCVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304,\nCVE-2025-71305, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23100, CVE-2026-23104,\nCVE-2026-23118, CVE-2026-23138, CVE-2026-23154, CVE-2026-23157,\nCVE-2026-23169, CVE-2026-23171, CVE-2026-23220, CVE-2026-23221,\nCVE-2026-23222, CVE-2026-23226, CVE-2026-23227, CVE-2026-23228,\nCVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234,\nCVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238,\nCVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23249, CVE-2026-23253,\nCVE-2026-23255, CVE-2026-23266, CVE-2026-23267, CVE-2026-23270,\nCVE-2026-23271, CVE-2026-23272, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23278, CVE-2026-23279, CVE-2026-23281, CVE-2026-23284,\nCVE-2026-23285, CVE-2026-23286, CVE-2026-23287, CVE-2026-23289,\nCVE-2026-23290, CVE-2026-23291, CVE-2026-23292, CVE-2026-23293,\nCVE-2026-23296, CVE-2026-23298, CVE-2026-23300, CVE-2026-23302,\nCVE-2026-23303, CVE-2026-23304, CVE-2026-23306, CVE-2026-23307,\nCVE-2026-23308, CVE-2026-23310, CVE-2026-23312, CVE-2026-23313,\nCVE-2026-23315, CVE-2026-23317, CVE-2026-23318, CVE-2026-23319,\nCVE-2026-23321, CVE-2026-23324, CVE-2026-23325, CVE-2026-23330,\nCVE-2026-23334, CVE-2026-23335, CVE-2026-23336, CVE-2026-23339,\nCVE-2026-23340, CVE-2026-23343, CVE-2026-23347, CVE-2026-23352,\nCVE-2026-23356, CVE-2026-23357, CVE-2026-23359, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23392, CVE-2026-23395, CVE-2026-23396,\nCVE-2026-23397, CVE-2026-23398, CVE-2026-23399, CVE-2026-23401,\nCVE-2026-23412, CVE-2026-23413, CVE-2026-23414, CVE-2026-23418,\nCVE-2026-23419, CVE-2026-23420, CVE-2026-23426, CVE-2026-23428,\nCVE-2026-23434, CVE-2026-23438, CVE-2026-23439, CVE-2026-23440,\nCVE-2026-23441, CVE-2026-23442, CVE-2026-23444, CVE-2026-23446,\nCVE-2026-23447, CVE-2026-23448, CVE-2026-23449, CVE-2026-23450,\nCVE-2026-23452, CVE-2026-23454, CVE-2026-23455, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31402, CVE-2026-31403, CVE-2026-31405, CVE-2026-31407,\nCVE-2026-31408, CVE-2026-31409, CVE-2026-31411, CVE-2026-31412,\nCVE-2026-31414, CVE-2026-31415, CVE-2026-31416, CVE-2026-31417,\nCVE-2026-31418, CVE-2026-31421, CVE-2026-31422, CVE-2026-31423,\nCVE-2026-31424, CVE-2026-31425, CVE-2026-31426, CVE-2026-31427,\nCVE-2026-31428, CVE-2026-31429, CVE-2026-31430, CVE-2026-31432,\nCVE-2026-31433, CVE-2026-31436, CVE-2026-31438, CVE-2026-31439,\nCVE-2026-31440, CVE-2026-31441, CVE-2026-31446, CVE-2026-31447,\nCVE-2026-31448, CVE-2026-31449, CVE-2026-31450, CVE-2026-31451,\nCVE-2026-31452, CVE-2026-31453, CVE-2026-31454, CVE-2026-31455,\nCVE-2026-31458, CVE-2026-31464, CVE-2026-31466, CVE-2026-31467,\nCVE-2026-31469, CVE-2026-31470, CVE-2026-31473, CVE-2026-31474,\nCVE-2026-31476, CVE-2026-31477, CVE-2026-31478, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31506, CVE-2026-31507, CVE-2026-31508,\nCVE-2026-31509, CVE-2026-31510, CVE-2026-31511, CVE-2026-31512,\nCVE-2026-31515, CVE-2026-31516, CVE-2026-31518, CVE-2026-31519,\nCVE-2026-31520, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,\nCVE-2026-31524, CVE-2026-31525, CVE-2026-31527, CVE-2026-31528,\nCVE-2026-31530, CVE-2026-31532, CVE-2026-31540, CVE-2026-31542,\nCVE-2026-31545, CVE-2026-31546, CVE-2026-31548, CVE-2026-31549,\nCVE-2026-31550, CVE-2026-31551, CVE-2026-31552, CVE-2026-31554,\nCVE-2026-31555, CVE-2026-31556, CVE-2026-31557, CVE-2026-31563,\nCVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31575,\nCVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,\nCVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584,\nCVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588,\nCVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596,\nCVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,\nCVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606,\nCVE-2026-31607, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612,\nCVE-2026-31613, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617,\nCVE-2026-31618, CVE-2026-31619, CVE-2026-31622, CVE-2026-31623,\nCVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627,\nCVE-2026-31628, CVE-2026-31629, CVE-2026-31634, CVE-2026-31637,\nCVE-2026-31638, CVE-2026-31639, CVE-2026-31642, CVE-2026-31645,\nCVE-2026-31646, CVE-2026-31648, CVE-2026-31649, CVE-2026-31651,\nCVE-2026-31655, CVE-2026-31656, CVE-2026-31657, CVE-2026-31658,\nCVE-2026-31659, CVE-2026-31660, CVE-2026-31661, CVE-2026-31662,\nCVE-2026-31664, CVE-2026-31665, CVE-2026-31667, CVE-2026-31668,\nCVE-2026-31669, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672,\nCVE-2026-31673, CVE-2026-31674, CVE-2026-31675, CVE-2026-31677,\nCVE-2026-31678, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,\nCVE-2026-31682, CVE-2026-31683, CVE-2026-31684, CVE-2026-31685,\nCVE-2026-31686, CVE-2026-31687, CVE-2026-31689, CVE-2026-31693,\nCVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,\nCVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701,\nCVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706,\nCVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711,\nCVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716,\nCVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723,\nCVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728,\nCVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737,\nCVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747,\nCVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,\nCVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,\nCVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,\nCVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772,\nCVE-2026-31773, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780,\nCVE-2026-31781, CVE-2026-31788, CVE-2026-43007, CVE-2026-43011,\nCVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015,\nCVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019,\nCVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025,\nCVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030,\nCVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43037,\nCVE-2026-43038, CVE-2026-43040, CVE-2026-43041, CVE-2026-43043,\nCVE-2026-43044, CVE-2026-43046, CVE-2026-43047, CVE-2026-43049,\nCVE-2026-43050, CVE-2026-43051, CVE-2026-43052, CVE-2026-43054,\nCVE-2026-43056, CVE-2026-43057, CVE-2026-43058, CVE-2026-43059,\nCVE-2026-43060, CVE-2026-43061, CVE-2026-43062, CVE-2026-43064,\nCVE-2026-43065, CVE-2026-43066, CVE-2026-43068, CVE-2026-43069,\nCVE-2026-43071, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074,\nCVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080,\nCVE-2026-43081, CVE-2026-43082, CVE-2026-43085, CVE-2026-43086,\nCVE-2026-43088, CVE-2026-43089, CVE-2026-43091, CVE-2026-43092,\nCVE-2026-43093, CVE-2026-43094, CVE-2026-43098, CVE-2026-43099,\nCVE-2026-43103, CVE-2026-43104, CVE-2026-43105, CVE-2026-43107,\nCVE-2026-43109, CVE-2026-43110, CVE-2026-43111, CVE-2026-43112,\nCVE-2026-43113, CVE-2026-43114, CVE-2026-43117, CVE-2026-43119,\nCVE-2026-43120, CVE-2026-43123, CVE-2026-43124, CVE-2026-43128,\nCVE-2026-43129, CVE-2026-43130, CVE-2026-43132, CVE-2026-43133,\nCVE-2026-43134, CVE-2026-43135, CVE-2026-43136, CVE-2026-43137,\nCVE-2026-43139, CVE-2026-43140, CVE-2026-43141, CVE-2026-43143,\nCVE-2026-43145, CVE-2026-43147, CVE-2026-43148, CVE-2026-43149,\nCVE-2026-43150, CVE-2026-43152, CVE-2026-43153, CVE-2026-43156,\nCVE-2026-43157, CVE-2026-43158, CVE-2026-43159, CVE-2026-43162,\nCVE-2026-43163, CVE-2026-43167, CVE-2026-43168, CVE-2026-43169,\nCVE-2026-43170, CVE-2026-43171, CVE-2026-43173, CVE-2026-43175,\nCVE-2026-43180, CVE-2026-43182, CVE-2026-43183, CVE-2026-43184,\nCVE-2026-43185, CVE-2026-43186, CVE-2026-43187, CVE-2026-43189,\nCVE-2026-43190, CVE-2026-43194, CVE-2026-43196, CVE-2026-43199,\nCVE-2026-43200, CVE-2026-43201, CVE-2026-43202, CVE-2026-43203,\nCVE-2026-43205, CVE-2026-43206, CVE-2026-43207, CVE-2026-43209,\nCVE-2026-43211, CVE-2026-43214, CVE-2026-43215, CVE-2026-43218,\nCVE-2026-43221, CVE-2026-43222, CVE-2026-43223, CVE-2026-43225,\nCVE-2026-43226, CVE-2026-43227, CVE-2026-43230, CVE-2026-43231,\nCVE-2026-43232, CVE-2026-43233, CVE-2026-43236, CVE-2026-43238,\nCVE-2026-43239, CVE-2026-43241, CVE-2026-43242, CVE-2026-43244,\nCVE-2026-43245, CVE-2026-43246, CVE-2026-43248, CVE-2026-43249,\nCVE-2026-43250, CVE-2026-43251, CVE-2026-43252, CVE-2026-43253,\nCVE-2026-43255, CVE-2026-43256, CVE-2026-43257, CVE-2026-43261,\nCVE-2026-43262, CVE-2026-43264, CVE-2026-43265, CVE-2026-43266,\nCVE-2026-43268, CVE-2026-43269, CVE-2026-43270, CVE-2026-43271,\nCVE-2026-43273, CVE-2026-43275, CVE-2026-43277, CVE-2026-43278,\nCVE-2026-43279, CVE-2026-43281, CVE-2026-43283, CVE-2026-43287,\nCVE-2026-43288, CVE-2026-43289, CVE-2026-43291, CVE-2026-43295,\nCVE-2026-43296, CVE-2026-43297, CVE-2026-43300, CVE-2026-43302,\nCVE-2026-43304, CVE-2026-43312, CVE-2026-43313, CVE-2026-43314,\nCVE-2026-43315, CVE-2026-43316, CVE-2026-43317, CVE-2026-43318,\nCVE-2026-43319, CVE-2026-43320, CVE-2026-43324, CVE-2026-43327,\nCVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332,\nCVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338,\nCVE-2026-43339, CVE-2026-43340, CVE-2026-43341, CVE-2026-43342,\nCVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43355,\nCVE-2026-43357, CVE-2026-43359, CVE-2026-43360, CVE-2026-43361,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43372, CVE-2026-43373, CVE-2026-43377,\nCVE-2026-43378, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43383, CVE-2026-43384, CVE-2026-43386, CVE-2026-43387,\nCVE-2026-43395, CVE-2026-43397, CVE-2026-43405, CVE-2026-43406,\nCVE-2026-43407, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43414, CVE-2026-43415,\nCVE-2026-43419, CVE-2026-43420, CVE-2026-43421, CVE-2026-43424,\nCVE-2026-43425, CVE-2026-43426, CVE-2026-43427, CVE-2026-43428,\nCVE-2026-43429, CVE-2026-43430, CVE-2026-43432, CVE-2026-43436,\nCVE-2026-43437, CVE-2026-43439, CVE-2026-43441, CVE-2026-43445,\nCVE-2026-43448, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451,\nCVE-2026-43452, CVE-2026-43453, CVE-2026-43455, CVE-2026-43456,\nCVE-2026-43457, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466,\nCVE-2026-43467, CVE-2026-43468, CVE-2026-43469, CVE-2026-43471,\nCVE-2026-43472, CVE-2026-43473, CVE-2026-43475, CVE-2026-43476,\nCVE-2026-43480, CVE-2026-43483, CVE-2026-43484, CVE-2026-43488,\nCVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43493,\nCVE-2026-43495, CVE-2026-43496, CVE-2026-43497, CVE-2026-43499,\nCVE-2026-43501, CVE-2026-43502, CVE-2026-45834, CVE-2026-45835,\nCVE-2026-45836, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840,\nCVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844,\nCVE-2026-45845, CVE-2026-45846, CVE-2026-45847, CVE-2026-45848,\nCVE-2026-45849, CVE-2026-45851, CVE-2026-45852, CVE-2026-45855,\nCVE-2026-45856, CVE-2026-45857, CVE-2026-45858, CVE-2026-45859,\nCVE-2026-45860, CVE-2026-45861, CVE-2026-45862, CVE-2026-45864,\nCVE-2026-45865, CVE-2026-45866, CVE-2026-45867, CVE-2026-45868,\nCVE-2026-45869, CVE-2026-45870, CVE-2026-45871, CVE-2026-45872,\nCVE-2026-45873, CVE-2026-45875, CVE-2026-45877, CVE-2026-45878,\nCVE-2026-45879, CVE-2026-45880, CVE-2026-45881, CVE-2026-45882,\nCVE-2026-45883, CVE-2026-45884, CVE-2026-45885, CVE-2026-45886,\nCVE-2026-45890, CVE-2026-45891, CVE-2026-45893, CVE-2026-45895,\nCVE-2026-45899, CVE-2026-45902, CVE-2026-45904, CVE-2026-45905,\nCVE-2026-45910, CVE-2026-45911, CVE-2026-45912, CVE-2026-45913,\nCVE-2026-45914, CVE-2026-45915, CVE-2026-45916, CVE-2026-45917,\nCVE-2026-45919, CVE-2026-45920, CVE-2026-45921, CVE-2026-45923,\nCVE-2026-45924, CVE-2026-45928, CVE-2026-45935, CVE-2026-45936,\nCVE-2026-45938, CVE-2026-45941, CVE-2026-45942, CVE-2026-45943,\nCVE-2026-45946, CVE-2026-45947, CVE-2026-45948, CVE-2026-45954,\nCVE-2026-45956, CVE-2026-45957, CVE-2026-45958, CVE-2026-45960,\nCVE-2026-45962, CVE-2026-45964, CVE-2026-45965, CVE-2026-45968,\nCVE-2026-45969, CVE-2026-45970, CVE-2026-45972, CVE-2026-45973,\nCVE-2026-45974, CVE-2026-45976, CVE-2026-45978, CVE-2026-45981,\nCVE-2026-45982, CVE-2026-45983, CVE-2026-45984, CVE-2026-45985,\nCVE-2026-45986, CVE-2026-45987, CVE-2026-45988, CVE-2026-45989,\nCVE-2026-45991, CVE-2026-45994, CVE-2026-45996, CVE-2026-45997,\nCVE-2026-45999, CVE-2026-46002, CVE-2026-46003, CVE-2026-46004,\nCVE-2026-46005, CVE-2026-46006, CVE-2026-46007, CVE-2026-46009,\nCVE-2026-46011, CVE-2026-46012, CVE-2026-46015, CVE-2026-46016,\nCVE-2026-46018, CVE-2026-46019, CVE-2026-46021, CVE-2026-46022,\nCVE-2026-46023, CVE-2026-46024, CVE-2026-46026, CVE-2026-46027,\nCVE-2026-46031, CVE-2026-46033, CVE-2026-46037, CVE-2026-46038,\nCVE-2026-46040, CVE-2026-46041, CVE-2026-46043, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46115, CVE-2026-46116, CVE-2026-46117, CVE-2026-46119,\nCVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123,\nCVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127,\nCVE-2026-46128, CVE-2026-46129, CVE-2026-46131, CVE-2026-46132,\nCVE-2026-46133, CVE-2026-46135, CVE-2026-46136, CVE-2026-46137,\nCVE-2026-46138, CVE-2026-46139, CVE-2026-46142, CVE-2026-46143,\nCVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46149,\nCVE-2026-46150, CVE-2026-46151, CVE-2026-46152, CVE-2026-46157,\nCVE-2026-46159, CVE-2026-46160, CVE-2026-46161, CVE-2026-46163,\nCVE-2026-46164, CVE-2026-46167, CVE-2026-46168, CVE-2026-46169,\nCVE-2026-46172, CVE-2026-46173, CVE-2026-46174, CVE-2026-46176,\nCVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180,\nCVE-2026-46184, CVE-2026-46185, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46194, CVE-2026-46195, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207,\nCVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212,\nCVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220,\nCVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229,\nCVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233,\nCVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238,\nCVE-2026-46241, CVE-2026-46243, CVE-2026-46244, CVE-2026-46246,\nCVE-2026-46247, CVE-2026-46249, CVE-2026-46250, CVE-2026-46251,\nCVE-2026-46253, CVE-2026-46254, CVE-2026-46255, CVE-2026-46259,\nCVE-2026-46260, CVE-2026-46261, CVE-2026-46265, CVE-2026-46266,\nCVE-2026-46267, CVE-2026-46270, CVE-2026-46273, CVE-2026-46274,\nCVE-2026-46280, CVE-2026-46282, CVE-2026-46285, CVE-2026-46286,\nCVE-2026-46287, CVE-2026-46289, CVE-2026-46291, CVE-2026-46292,\nCVE-2026-46293, CVE-2026-46294, CVE-2026-46296, CVE-2026-46299,\nCVE-2026-46301, CVE-2026-46303, CVE-2026-46304, CVE-2026-46306,\nCVE-2026-46307, CVE-2026-46312, CVE-2026-46314, CVE-2026-46319,\nCVE-2026-46328, CVE-2026-52911, CVE-2026-52920, CVE-2026-52925,\nCVE-2026-52933, CVE-2026-52936, CVE-2026-52951, CVE-2026-52954,\nCVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52961,\nCVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52967,\nCVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52974,\nCVE-2026-52975, CVE-2026-52977, CVE-2026-52981, CVE-2026-52982,\nCVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,\nCVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,\nCVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015,\nCVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,\nCVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035,\nCVE-2026-53036, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,\nCVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,\nCVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,\nCVE-2026-53052, CVE-2026-53056, CVE-2026-53058, CVE-2026-53059,\nCVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063,\nCVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53068,\nCVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53088, CVE-2026-53093, CVE-2026-53094,\nCVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53110,\nCVE-2026-53111, CVE-2026-53112, CVE-2026-53115, CVE-2026-53117,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53126, CVE-2026-53128,\nCVE-2026-53130, CVE-2026-53279, CVE-2026-53287, CVE-2026-53289,\nCVE-2026-53291, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295,\nCVE-2026-53296, CVE-2026-53303, CVE-2026-53304, CVE-2026-53306,\nCVE-2026-53309, CVE-2026-53314, CVE-2026-53320, CVE-2026-53369,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53379,\nCVE-2026-63838, CVE-2026-63843, CVE-2026-63844, CVE-2026-63845,\nCVE-2026-63846, CVE-2026-63847, CVE-2026-63848, CVE-2026-63851,\nCVE-2026-63852, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63860, CVE-2026-63861, CVE-2026-63862, CVE-2026-63865,\nCVE-2026-64018, CVE-2026-64034)\n","status":"published","published":"2026-07-24T10:20:29Z","modified":"2026-11-07T01:46:01.058375657Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8608-1","title":"linux-azure-fips vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31506, CVE-2026-31507, CVE-2026-31508,\nCVE-2026-31509, CVE-2026-31510, CVE-2026-31511, CVE-2026-31512,\nCVE-2026-31515, CVE-2026-31516, CVE-2026-31518, CVE-2026-31519,\nCVE-2026-31520, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,\nCVE-2026-31524, CVE-2026-31525, CVE-2026-31527, CVE-2026-31528,\nCVE-2026-31530, CVE-2026-31532, CVE-2026-31540, CVE-2026-31542,\nCVE-2026-31545, CVE-2026-31546, CVE-2026-31548, CVE-2026-31549,\nCVE-2026-31550, CVE-2026-31551, CVE-2026-31552, CVE-2026-31554,\nCVE-2026-31555, CVE-2026-31556, CVE-2026-31557, CVE-2026-31563,\nCVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31575,\nCVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,\nCVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584,\nCVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588,\nCVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596,\nCVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,\nCVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606,\nCVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613,\nCVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618,\nCVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,\nCVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628,\nCVE-2026-31629, CVE-2026-31634, CVE-2026-31638, CVE-2026-31639,\nCVE-2026-31642, CVE-2026-31645, CVE-2026-31646, CVE-2026-31648,\nCVE-2026-31651, CVE-2026-31655, CVE-2026-31656, CVE-2026-31658,\nCVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664,\nCVE-2026-31665, CVE-2026-31667, CVE-2026-31670, CVE-2026-31671,\nCVE-2026-31672, CVE-2026-31673, CVE-2026-31674, CVE-2026-31675,\nCVE-2026-31677, CVE-2026-31678, CVE-2026-31679, CVE-2026-31680,\nCVE-2026-31681, CVE-2026-31683, CVE-2026-31684, CVE-2026-31686,\nCVE-2026-31689, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696,\nCVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700,\nCVE-2026-31701, CVE-2026-31702, CVE-2026-31704, CVE-2026-31705,\nCVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709,\nCVE-2026-31711, CVE-2026-31712, CVE-2026-31714, CVE-2026-31715,\nCVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31722,\nCVE-2026-31723, CVE-2026-31724, CVE-2026-31725, CVE-2026-31726,\nCVE-2026-31728, CVE-2026-31729, CVE-2026-31730, CVE-2026-31731,\nCVE-2026-31737, CVE-2026-31738, CVE-2026-31740, CVE-2026-31741,\nCVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751,\nCVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756,\nCVE-2026-31758, CVE-2026-31759, CVE-2026-31761, CVE-2026-31762,\nCVE-2026-31763, CVE-2026-31767, CVE-2026-31768, CVE-2026-31770,\nCVE-2026-31772, CVE-2026-31773, CVE-2026-31778, CVE-2026-31779,\nCVE-2026-31780, CVE-2026-31781, CVE-2026-31788, CVE-2026-43007,\nCVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015,\nCVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019,\nCVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025,\nCVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030,\nCVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43040,\nCVE-2026-43041, CVE-2026-43043, CVE-2026-43044, CVE-2026-43046,\nCVE-2026-43047, CVE-2026-43049, CVE-2026-43050, CVE-2026-43051,\nCVE-2026-43052, CVE-2026-43054, CVE-2026-43056, CVE-2026-43057,\nCVE-2026-43058, CVE-2026-43059, CVE-2026-43060, CVE-2026-43061,\nCVE-2026-43062, CVE-2026-43064, CVE-2026-43065, CVE-2026-43066,\nCVE-2026-43068, CVE-2026-43069, CVE-2026-43072, CVE-2026-43073,\nCVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079,\nCVE-2026-43080, CVE-2026-43081, CVE-2026-43082, CVE-2026-43084,\nCVE-2026-43085, CVE-2026-43086, CVE-2026-43088, CVE-2026-43089,\nCVE-2026-43091, CVE-2026-43092, CVE-2026-43093, CVE-2026-43094,\nCVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104,\nCVE-2026-43105, CVE-2026-43107, CVE-2026-43109, CVE-2026-43110,\nCVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43119,\nCVE-2026-43120, CVE-2026-43129, CVE-2026-43162, CVE-2026-43245,\nCVE-2026-43252, CVE-2026-43265, CVE-2026-43281, CVE-2026-43324,\nCVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330,\nCVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,\nCVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43342,\nCVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43355,\nCVE-2026-43357, CVE-2026-43359, CVE-2026-43360, CVE-2026-43361,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43371, CVE-2026-43372, CVE-2026-43373,\nCVE-2026-43377, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43386, CVE-2026-43387, CVE-2026-43395, CVE-2026-43397,\nCVE-2026-43405, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43415, CVE-2026-43419,\nCVE-2026-43420, CVE-2026-43421, CVE-2026-43424, CVE-2026-43425,\nCVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429,\nCVE-2026-43430, CVE-2026-43432, CVE-2026-43436, CVE-2026-43437,\nCVE-2026-43439, CVE-2026-43441, CVE-2026-43445, CVE-2026-43448,\nCVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,\nCVE-2026-43453, CVE-2026-43455, CVE-2026-43456, CVE-2026-43457,\nCVE-2026-43458, CVE-2026-43459, CVE-2026-43466, CVE-2026-43467,\nCVE-2026-43468, CVE-2026-43469, CVE-2026-43471, CVE-2026-43472,\nCVE-2026-43473, CVE-2026-43475, CVE-2026-43476, CVE-2026-43480,\nCVE-2026-43483, CVE-2026-43484, CVE-2026-43488, CVE-2026-43490,\nCVE-2026-43491, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43499, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,\nCVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,\nCVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45855,\nCVE-2026-45858, CVE-2026-45899, CVE-2026-45911, CVE-2026-45920,\nCVE-2026-45924, CVE-2026-45942, CVE-2026-45943, CVE-2026-45956,\nCVE-2026-45958, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987,\nCVE-2026-45989, CVE-2026-45991, CVE-2026-45994, CVE-2026-45996,\nCVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003,\nCVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007,\nCVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015,\nCVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021,\nCVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026,\nCVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037,\nCVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46120, CVE-2026-46121,\nCVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125,\nCVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129,\nCVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46136,\nCVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142,\nCVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161,\nCVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174,\nCVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179,\nCVE-2026-46180, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46194, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198,\nCVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46204,\nCVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208,\nCVE-2026-46209, CVE-2026-46211, CVE-2026-46212, CVE-2026-46214,\nCVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46225,\nCVE-2026-46226, CVE-2026-46227, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46241,\nCVE-2026-46273, CVE-2026-46274, CVE-2026-46280, CVE-2026-46282,\nCVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46291,\nCVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296,\nCVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314,\nCVE-2026-46319, CVE-2026-52911, CVE-2026-52920, CVE-2026-52925,\nCVE-2026-52933, CVE-2026-52936, CVE-2026-52951, CVE-2026-52954,\nCVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52961,\nCVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52967,\nCVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52974,\nCVE-2026-52975, CVE-2026-52977, CVE-2026-52981, CVE-2026-52982,\nCVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,\nCVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,\nCVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015,\nCVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,\nCVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035,\nCVE-2026-53036, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,\nCVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,\nCVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,\nCVE-2026-53052, CVE-2026-53056, CVE-2026-53058, CVE-2026-53059,\nCVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063,\nCVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53068,\nCVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53088, CVE-2026-53093, CVE-2026-53094,\nCVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53110,\nCVE-2026-53111, CVE-2026-53112, CVE-2026-53115, CVE-2026-53117,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53126, CVE-2026-53128,\nCVE-2026-53130, CVE-2026-53279, CVE-2026-53287, CVE-2026-53289,\nCVE-2026-53291, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295,\nCVE-2026-53296, CVE-2026-53303, CVE-2026-53304, CVE-2026-53306,\nCVE-2026-53309, CVE-2026-53314, CVE-2026-53320, CVE-2026-53369,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53379,\nCVE-2026-63838, CVE-2026-63843, CVE-2026-63844, CVE-2026-63845,\nCVE-2026-63846, CVE-2026-63847, CVE-2026-63848, CVE-2026-63851,\nCVE-2026-63852, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63860, CVE-2026-63861, CVE-2026-63862, CVE-2026-63865,\nCVE-2026-64018, CVE-2026-64034, CVE-2026-64164)\n","status":"published","published":"2026-07-24T10:23:19Z","modified":"2026-11-09T12:47:05.283755841Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8609-1","title":"linux-azure-fde-6.8 vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - ATM drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - RNBD block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Clocksource drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - CPU idle management framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Multifunction device drivers;\n  - Broadcom VK accelerator driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MOST (Media Oriented Systems Transport) drivers;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Performance monitor drivers;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - RAS (Reliability, Availability, Serviceability) subsystem;\n  - Remote Processor subsystem;\n  - RPMSG subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - MediaTek SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - Texas Instruments SoC drivers;\n  - SPI subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - ChipIdea USB driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FAT file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - Pstore file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Audit subsystem;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - Kernel kexec() syscall;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Scheduler infrastructure;\n  - Cryptographic library;\n  - Scatterlist API;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Landlock security;\n  - Simplified Mandatory Access Control Kernel framework;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40005, CVE-2025-40135, CVE-2025-40150, CVE-2025-68175,\nCVE-2025-68239, CVE-2025-68334, CVE-2025-68736, CVE-2025-71152,\nCVE-2025-71161, CVE-2025-71203, CVE-2025-71221, CVE-2025-71229,\nCVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235,\nCVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239,\nCVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71269,\nCVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286,\nCVE-2025-71287, CVE-2025-71288, CVE-2025-71291, CVE-2025-71292,\nCVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304,\nCVE-2025-71305, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23100, CVE-2026-23104,\nCVE-2026-23118, CVE-2026-23138, CVE-2026-23154, CVE-2026-23157,\nCVE-2026-23169, CVE-2026-23171, CVE-2026-23220, CVE-2026-23221,\nCVE-2026-23222, CVE-2026-23226, CVE-2026-23227, CVE-2026-23228,\nCVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234,\nCVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238,\nCVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23249, CVE-2026-23253,\nCVE-2026-23255, CVE-2026-23266, CVE-2026-23267, CVE-2026-23270,\nCVE-2026-23271, CVE-2026-23272, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23278, CVE-2026-23279, CVE-2026-23281, CVE-2026-23284,\nCVE-2026-23285, CVE-2026-23286, CVE-2026-23287, CVE-2026-23289,\nCVE-2026-23290, CVE-2026-23291, CVE-2026-23292, CVE-2026-23293,\nCVE-2026-23296, CVE-2026-23298, CVE-2026-23300, CVE-2026-23302,\nCVE-2026-23303, CVE-2026-23304, CVE-2026-23306, CVE-2026-23307,\nCVE-2026-23308, CVE-2026-23310, CVE-2026-23312, CVE-2026-23313,\nCVE-2026-23315, CVE-2026-23317, CVE-2026-23318, CVE-2026-23319,\nCVE-2026-23321, CVE-2026-23324, CVE-2026-23325, CVE-2026-23330,\nCVE-2026-23334, CVE-2026-23335, CVE-2026-23336, CVE-2026-23339,\nCVE-2026-23340, CVE-2026-23343, CVE-2026-23347, CVE-2026-23352,\nCVE-2026-23356, CVE-2026-23357, CVE-2026-23359, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23392, CVE-2026-23395, CVE-2026-23396,\nCVE-2026-23397, CVE-2026-23398, CVE-2026-23399, CVE-2026-23401,\nCVE-2026-23412, CVE-2026-23413, CVE-2026-23414, CVE-2026-23418,\nCVE-2026-23419, CVE-2026-23420, CVE-2026-23426, CVE-2026-23428,\nCVE-2026-23434, CVE-2026-23438, CVE-2026-23439, CVE-2026-23440,\nCVE-2026-23441, CVE-2026-23442, CVE-2026-23444, CVE-2026-23446,\nCVE-2026-23447, CVE-2026-23448, CVE-2026-23449, CVE-2026-23450,\nCVE-2026-23452, CVE-2026-23454, CVE-2026-23455, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31402, CVE-2026-31403, CVE-2026-31405, CVE-2026-31407,\nCVE-2026-31408, CVE-2026-31409, CVE-2026-31411, CVE-2026-31412,\nCVE-2026-31414, CVE-2026-31415, CVE-2026-31416, CVE-2026-31417,\nCVE-2026-31418, CVE-2026-31421, CVE-2026-31422, CVE-2026-31423,\nCVE-2026-31424, CVE-2026-31425, CVE-2026-31426, CVE-2026-31427,\nCVE-2026-31428, CVE-2026-31429, CVE-2026-31430, CVE-2026-31432,\nCVE-2026-31433, CVE-2026-31436, CVE-2026-31438, CVE-2026-31439,\nCVE-2026-31440, CVE-2026-31441, CVE-2026-31446, CVE-2026-31447,\nCVE-2026-31448, CVE-2026-31449, CVE-2026-31450, CVE-2026-31451,\nCVE-2026-31452, CVE-2026-31453, CVE-2026-31454, CVE-2026-31455,\nCVE-2026-31458, CVE-2026-31464, CVE-2026-31466, CVE-2026-31467,\nCVE-2026-31469, CVE-2026-31470, CVE-2026-31473, CVE-2026-31474,\nCVE-2026-31476, CVE-2026-31477, CVE-2026-31478, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31506, CVE-2026-31507, CVE-2026-31508,\nCVE-2026-31509, CVE-2026-31510, CVE-2026-31511, CVE-2026-31512,\nCVE-2026-31515, CVE-2026-31516, CVE-2026-31518, CVE-2026-31519,\nCVE-2026-31520, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,\nCVE-2026-31524, CVE-2026-31525, CVE-2026-31527, CVE-2026-31528,\nCVE-2026-31530, CVE-2026-31532, CVE-2026-31540, CVE-2026-31542,\nCVE-2026-31545, CVE-2026-31546, CVE-2026-31548, CVE-2026-31549,\nCVE-2026-31550, CVE-2026-31551, CVE-2026-31552, CVE-2026-31554,\nCVE-2026-31555, CVE-2026-31556, CVE-2026-31557, CVE-2026-31563,\nCVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31575,\nCVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,\nCVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584,\nCVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588,\nCVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596,\nCVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,\nCVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606,\nCVE-2026-31607, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612,\nCVE-2026-31613, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617,\nCVE-2026-31618, CVE-2026-31619, CVE-2026-31622, CVE-2026-31623,\nCVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627,\nCVE-2026-31628, CVE-2026-31629, CVE-2026-31634, CVE-2026-31637,\nCVE-2026-31638, CVE-2026-31639, CVE-2026-31642, CVE-2026-31645,\nCVE-2026-31646, CVE-2026-31648, CVE-2026-31649, CVE-2026-31651,\nCVE-2026-31655, CVE-2026-31656, CVE-2026-31657, CVE-2026-31658,\nCVE-2026-31659, CVE-2026-31660, CVE-2026-31661, CVE-2026-31662,\nCVE-2026-31664, CVE-2026-31665, CVE-2026-31667, CVE-2026-31668,\nCVE-2026-31669, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672,\nCVE-2026-31673, CVE-2026-31674, CVE-2026-31675, CVE-2026-31677,\nCVE-2026-31678, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,\nCVE-2026-31682, CVE-2026-31683, CVE-2026-31684, CVE-2026-31685,\nCVE-2026-31686, CVE-2026-31687, CVE-2026-31689, CVE-2026-31693,\nCVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,\nCVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701,\nCVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706,\nCVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711,\nCVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716,\nCVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723,\nCVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728,\nCVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737,\nCVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747,\nCVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,\nCVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,\nCVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,\nCVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772,\nCVE-2026-31773, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780,\nCVE-2026-31781, CVE-2026-31788, CVE-2026-43007, CVE-2026-43011,\nCVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015,\nCVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019,\nCVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025,\nCVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030,\nCVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43037,\nCVE-2026-43038, CVE-2026-43040, CVE-2026-43041, CVE-2026-43043,\nCVE-2026-43044, CVE-2026-43046, CVE-2026-43047, CVE-2026-43049,\nCVE-2026-43050, CVE-2026-43051, CVE-2026-43052, CVE-2026-43054,\nCVE-2026-43056, CVE-2026-43057, CVE-2026-43058, CVE-2026-43059,\nCVE-2026-43060, CVE-2026-43061, CVE-2026-43062, CVE-2026-43064,\nCVE-2026-43065, CVE-2026-43066, CVE-2026-43068, CVE-2026-43069,\nCVE-2026-43071, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074,\nCVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080,\nCVE-2026-43081, CVE-2026-43082, CVE-2026-43085, CVE-2026-43086,\nCVE-2026-43088, CVE-2026-43089, CVE-2026-43091, CVE-2026-43092,\nCVE-2026-43093, CVE-2026-43094, CVE-2026-43098, CVE-2026-43099,\nCVE-2026-43103, CVE-2026-43104, CVE-2026-43105, CVE-2026-43107,\nCVE-2026-43109, CVE-2026-43110, CVE-2026-43111, CVE-2026-43112,\nCVE-2026-43113, CVE-2026-43114, CVE-2026-43117, CVE-2026-43119,\nCVE-2026-43120, CVE-2026-43123, CVE-2026-43124, CVE-2026-43128,\nCVE-2026-43129, CVE-2026-43130, CVE-2026-43132, CVE-2026-43133,\nCVE-2026-43134, CVE-2026-43135, CVE-2026-43136, CVE-2026-43137,\nCVE-2026-43139, CVE-2026-43140, CVE-2026-43141, CVE-2026-43143,\nCVE-2026-43145, CVE-2026-43147, CVE-2026-43148, CVE-2026-43149,\nCVE-2026-43150, CVE-2026-43152, CVE-2026-43153, CVE-2026-43156,\nCVE-2026-43157, CVE-2026-43158, CVE-2026-43159, CVE-2026-43162,\nCVE-2026-43163, CVE-2026-43167, CVE-2026-43168, CVE-2026-43169,\nCVE-2026-43170, CVE-2026-43171, CVE-2026-43173, CVE-2026-43175,\nCVE-2026-43180, CVE-2026-43182, CVE-2026-43183, CVE-2026-43184,\nCVE-2026-43185, CVE-2026-43186, CVE-2026-43187, CVE-2026-43189,\nCVE-2026-43190, CVE-2026-43194, CVE-2026-43196, CVE-2026-43199,\nCVE-2026-43200, CVE-2026-43201, CVE-2026-43202, CVE-2026-43203,\nCVE-2026-43205, CVE-2026-43206, CVE-2026-43207, CVE-2026-43209,\nCVE-2026-43211, CVE-2026-43214, CVE-2026-43215, CVE-2026-43218,\nCVE-2026-43221, CVE-2026-43222, CVE-2026-43223, CVE-2026-43225,\nCVE-2026-43226, CVE-2026-43227, CVE-2026-43230, CVE-2026-43231,\nCVE-2026-43232, CVE-2026-43233, CVE-2026-43236, CVE-2026-43238,\nCVE-2026-43239, CVE-2026-43241, CVE-2026-43242, CVE-2026-43244,\nCVE-2026-43245, CVE-2026-43246, CVE-2026-43248, CVE-2026-43249,\nCVE-2026-43250, CVE-2026-43251, CVE-2026-43252, CVE-2026-43253,\nCVE-2026-43255, CVE-2026-43256, CVE-2026-43257, CVE-2026-43261,\nCVE-2026-43262, CVE-2026-43264, CVE-2026-43265, CVE-2026-43266,\nCVE-2026-43268, CVE-2026-43269, CVE-2026-43270, CVE-2026-43271,\nCVE-2026-43273, CVE-2026-43275, CVE-2026-43277, CVE-2026-43278,\nCVE-2026-43279, CVE-2026-43281, CVE-2026-43283, CVE-2026-43287,\nCVE-2026-43288, CVE-2026-43289, CVE-2026-43291, CVE-2026-43295,\nCVE-2026-43296, CVE-2026-43297, CVE-2026-43300, CVE-2026-43302,\nCVE-2026-43304, CVE-2026-43312, CVE-2026-43313, CVE-2026-43314,\nCVE-2026-43315, CVE-2026-43316, CVE-2026-43317, CVE-2026-43318,\nCVE-2026-43319, CVE-2026-43320, CVE-2026-43324, CVE-2026-43327,\nCVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332,\nCVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338,\nCVE-2026-43339, CVE-2026-43340, CVE-2026-43341, CVE-2026-43342,\nCVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43355,\nCVE-2026-43357, CVE-2026-43359, CVE-2026-43360, CVE-2026-43361,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43372, CVE-2026-43373, CVE-2026-43377,\nCVE-2026-43378, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43383, CVE-2026-43384, CVE-2026-43386, CVE-2026-43387,\nCVE-2026-43395, CVE-2026-43397, CVE-2026-43405, CVE-2026-43406,\nCVE-2026-43407, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43414, CVE-2026-43415,\nCVE-2026-43419, CVE-2026-43420, CVE-2026-43421, CVE-2026-43424,\nCVE-2026-43425, CVE-2026-43426, CVE-2026-43427, CVE-2026-43428,\nCVE-2026-43429, CVE-2026-43430, CVE-2026-43432, CVE-2026-43436,\nCVE-2026-43437, CVE-2026-43439, CVE-2026-43441, CVE-2026-43445,\nCVE-2026-43448, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451,\nCVE-2026-43452, CVE-2026-43453, CVE-2026-43455, CVE-2026-43456,\nCVE-2026-43457, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466,\nCVE-2026-43467, CVE-2026-43468, CVE-2026-43469, CVE-2026-43471,\nCVE-2026-43472, CVE-2026-43473, CVE-2026-43475, CVE-2026-43476,\nCVE-2026-43480, CVE-2026-43483, CVE-2026-43484, CVE-2026-43488,\nCVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43493,\nCVE-2026-43495, CVE-2026-43496, CVE-2026-43497, CVE-2026-43499,\nCVE-2026-43501, CVE-2026-43502, CVE-2026-45834, CVE-2026-45835,\nCVE-2026-45836, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840,\nCVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844,\nCVE-2026-45845, CVE-2026-45846, CVE-2026-45847, CVE-2026-45848,\nCVE-2026-45849, CVE-2026-45851, CVE-2026-45852, CVE-2026-45855,\nCVE-2026-45856, CVE-2026-45857, CVE-2026-45858, CVE-2026-45859,\nCVE-2026-45860, CVE-2026-45861, CVE-2026-45862, CVE-2026-45864,\nCVE-2026-45865, CVE-2026-45866, CVE-2026-45867, CVE-2026-45868,\nCVE-2026-45869, CVE-2026-45870, CVE-2026-45871, CVE-2026-45872,\nCVE-2026-45873, CVE-2026-45875, CVE-2026-45877, CVE-2026-45878,\nCVE-2026-45879, CVE-2026-45880, CVE-2026-45881, CVE-2026-45882,\nCVE-2026-45883, CVE-2026-45884, CVE-2026-45885, CVE-2026-45886,\nCVE-2026-45890, CVE-2026-45891, CVE-2026-45893, CVE-2026-45895,\nCVE-2026-45899, CVE-2026-45902, CVE-2026-45904, CVE-2026-45905,\nCVE-2026-45910, CVE-2026-45911, CVE-2026-45912, CVE-2026-45913,\nCVE-2026-45914, CVE-2026-45915, CVE-2026-45916, CVE-2026-45917,\nCVE-2026-45919, CVE-2026-45920, CVE-2026-45921, CVE-2026-45923,\nCVE-2026-45924, CVE-2026-45928, CVE-2026-45935, CVE-2026-45936,\nCVE-2026-45938, CVE-2026-45941, CVE-2026-45942, CVE-2026-45943,\nCVE-2026-45946, CVE-2026-45947, CVE-2026-45948, CVE-2026-45954,\nCVE-2026-45956, CVE-2026-45957, CVE-2026-45958, CVE-2026-45960,\nCVE-2026-45962, CVE-2026-45964, CVE-2026-45965, CVE-2026-45968,\nCVE-2026-45969, CVE-2026-45970, CVE-2026-45972, CVE-2026-45973,\nCVE-2026-45974, CVE-2026-45976, CVE-2026-45978, CVE-2026-45981,\nCVE-2026-45982, CVE-2026-45983, CVE-2026-45984, CVE-2026-45985,\nCVE-2026-45986, CVE-2026-45987, CVE-2026-45988, CVE-2026-45989,\nCVE-2026-45991, CVE-2026-45994, CVE-2026-45996, CVE-2026-45997,\nCVE-2026-45999, CVE-2026-46002, CVE-2026-46003, CVE-2026-46004,\nCVE-2026-46005, CVE-2026-46006, CVE-2026-46007, CVE-2026-46009,\nCVE-2026-46011, CVE-2026-46012, CVE-2026-46015, CVE-2026-46016,\nCVE-2026-46018, CVE-2026-46019, CVE-2026-46021, CVE-2026-46022,\nCVE-2026-46023, CVE-2026-46024, CVE-2026-46026, CVE-2026-46027,\nCVE-2026-46031, CVE-2026-46033, CVE-2026-46037, CVE-2026-46038,\nCVE-2026-46040, CVE-2026-46041, CVE-2026-46043, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46115, CVE-2026-46116, CVE-2026-46117, CVE-2026-46119,\nCVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123,\nCVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127,\nCVE-2026-46128, CVE-2026-46129, CVE-2026-46131, CVE-2026-46132,\nCVE-2026-46133, CVE-2026-46135, CVE-2026-46136, CVE-2026-46137,\nCVE-2026-46138, CVE-2026-46139, CVE-2026-46142, CVE-2026-46143,\nCVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46149,\nCVE-2026-46150, CVE-2026-46151, CVE-2026-46152, CVE-2026-46157,\nCVE-2026-46159, CVE-2026-46160, CVE-2026-46161, CVE-2026-46163,\nCVE-2026-46164, CVE-2026-46167, CVE-2026-46168, CVE-2026-46169,\nCVE-2026-46172, CVE-2026-46173, CVE-2026-46174, CVE-2026-46176,\nCVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180,\nCVE-2026-46184, CVE-2026-46185, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46194, CVE-2026-46195, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207,\nCVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212,\nCVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220,\nCVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229,\nCVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233,\nCVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238,\nCVE-2026-46241, CVE-2026-46243, CVE-2026-46244, CVE-2026-46246,\nCVE-2026-46247, CVE-2026-46249, CVE-2026-46250, CVE-2026-46251,\nCVE-2026-46253, CVE-2026-46254, CVE-2026-46255, CVE-2026-46259,\nCVE-2026-46260, CVE-2026-46261, CVE-2026-46265, CVE-2026-46266,\nCVE-2026-46267, CVE-2026-46270, CVE-2026-46273, CVE-2026-46274,\nCVE-2026-46280, CVE-2026-46282, CVE-2026-46285, CVE-2026-46286,\nCVE-2026-46287, CVE-2026-46289, CVE-2026-46291, CVE-2026-46292,\nCVE-2026-46293, CVE-2026-46294, CVE-2026-46296, CVE-2026-46299,\nCVE-2026-46301, CVE-2026-46303, CVE-2026-46304, CVE-2026-46306,\nCVE-2026-46307, CVE-2026-46312, CVE-2026-46314, CVE-2026-46319,\nCVE-2026-46328, CVE-2026-52911, CVE-2026-52920, CVE-2026-52925,\nCVE-2026-52933, CVE-2026-52936, CVE-2026-52951, CVE-2026-52954,\nCVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52961,\nCVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52967,\nCVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52974,\nCVE-2026-52975, CVE-2026-52977, CVE-2026-52981, CVE-2026-52982,\nCVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,\nCVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,\nCVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015,\nCVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,\nCVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035,\nCVE-2026-53036, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,\nCVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,\nCVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,\nCVE-2026-53052, CVE-2026-53056, CVE-2026-53058, CVE-2026-53059,\nCVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063,\nCVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53068,\nCVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53088, CVE-2026-53093, CVE-2026-53094,\nCVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53110,\nCVE-2026-53111, CVE-2026-53112, CVE-2026-53115, CVE-2026-53117,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53126, CVE-2026-53128,\nCVE-2026-53130, CVE-2026-53279, CVE-2026-53287, CVE-2026-53289,\nCVE-2026-53291, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295,\nCVE-2026-53296, CVE-2026-53303, CVE-2026-53304, CVE-2026-53306,\nCVE-2026-53309, CVE-2026-53314, CVE-2026-53320, CVE-2026-53369,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53379,\nCVE-2026-63838, CVE-2026-63843, CVE-2026-63844, CVE-2026-63845,\nCVE-2026-63846, CVE-2026-63847, CVE-2026-63848, CVE-2026-63851,\nCVE-2026-63852, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63860, CVE-2026-63861, CVE-2026-63862, CVE-2026-63865,\nCVE-2026-64018, CVE-2026-64034, CVE-2026-64164)\n","status":"published","published":"2026-07-24T10:26:03Z","modified":"2026-11-07T01:45:29.525006235Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8619-1","title":"linux-hwe-6.8 vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - ATM drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - RNBD block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Clocksource drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - CPU idle management framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Multifunction device drivers;\n  - Broadcom VK accelerator driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MOST (Media Oriented Systems Transport) drivers;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Performance monitor drivers;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - RAS (Reliability, Availability, Serviceability) subsystem;\n  - Remote Processor subsystem;\n  - RPMSG subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - MediaTek SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - Texas Instruments SoC drivers;\n  - SPI subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - ChipIdea USB driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FAT file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - Pstore file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Audit subsystem;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - Kernel kexec() syscall;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Scheduler infrastructure;\n  - Cryptographic library;\n  - Scatterlist API;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Landlock security;\n  - Simplified Mandatory Access Control Kernel framework;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40005, CVE-2025-40135, CVE-2025-40150, CVE-2025-68175,\nCVE-2025-68239, CVE-2025-68334, CVE-2025-68736, CVE-2025-71152,\nCVE-2025-71161, CVE-2025-71203, CVE-2025-71221, CVE-2025-71229,\nCVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235,\nCVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239,\nCVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71269,\nCVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286,\nCVE-2025-71287, CVE-2025-71288, CVE-2025-71291, CVE-2025-71292,\nCVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304,\nCVE-2025-71305, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23100, CVE-2026-23104,\nCVE-2026-23118, CVE-2026-23138, CVE-2026-23154, CVE-2026-23157,\nCVE-2026-23169, CVE-2026-23171, CVE-2026-23207, CVE-2026-23220,\nCVE-2026-23221, CVE-2026-23222, CVE-2026-23226, CVE-2026-23227,\nCVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233,\nCVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237,\nCVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243,\nCVE-2026-23244, CVE-2026-23245, CVE-2026-23246, CVE-2026-23249,\nCVE-2026-23253, CVE-2026-23255, CVE-2026-23266, CVE-2026-23267,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23272, CVE-2026-23276,\nCVE-2026-23277, CVE-2026-23278, CVE-2026-23279, CVE-2026-23281,\nCVE-2026-23284, CVE-2026-23285, CVE-2026-23286, CVE-2026-23287,\nCVE-2026-23289, CVE-2026-23290, CVE-2026-23291, CVE-2026-23292,\nCVE-2026-23293, CVE-2026-23296, CVE-2026-23298, CVE-2026-23300,\nCVE-2026-23302, CVE-2026-23303, CVE-2026-23304, CVE-2026-23306,\nCVE-2026-23307, CVE-2026-23308, CVE-2026-23310, CVE-2026-23312,\nCVE-2026-23313, CVE-2026-23315, CVE-2026-23317, CVE-2026-23318,\nCVE-2026-23319, CVE-2026-23321, CVE-2026-23324, CVE-2026-23325,\nCVE-2026-23330, CVE-2026-23334, CVE-2026-23335, CVE-2026-23336,\nCVE-2026-23339, CVE-2026-23340, CVE-2026-23343, CVE-2026-23347,\nCVE-2026-23352, CVE-2026-23356, CVE-2026-23357, CVE-2026-23359,\nCVE-2026-23360, CVE-2026-23361, CVE-2026-23362, CVE-2026-23363,\nCVE-2026-23364, CVE-2026-23365, CVE-2026-23367, CVE-2026-23368,\nCVE-2026-23369, CVE-2026-23370, CVE-2026-23372, CVE-2026-23374,\nCVE-2026-23375, CVE-2026-23378, CVE-2026-23379, CVE-2026-23381,\nCVE-2026-23382, CVE-2026-23383, CVE-2026-23386, CVE-2026-23387,\nCVE-2026-23388, CVE-2026-23389, CVE-2026-23391, CVE-2026-23392,\nCVE-2026-23395, CVE-2026-23396, CVE-2026-23397, CVE-2026-23398,\nCVE-2026-23399, CVE-2026-23401, CVE-2026-23412, CVE-2026-23413,\nCVE-2026-23414, CVE-2026-23418, CVE-2026-23419, CVE-2026-23420,\nCVE-2026-23426, CVE-2026-23428, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23450, CVE-2026-23452, CVE-2026-23454,\nCVE-2026-23455, CVE-2026-23456, CVE-2026-23457, CVE-2026-23458,\nCVE-2026-23460, CVE-2026-23461, CVE-2026-23462, CVE-2026-23463,\nCVE-2026-23464, CVE-2026-23465, CVE-2026-23468, CVE-2026-23470,\nCVE-2026-23474, CVE-2026-23475, CVE-2026-31389, CVE-2026-31391,\nCVE-2026-31392, CVE-2026-31393, CVE-2026-31394, CVE-2026-31396,\nCVE-2026-31399, CVE-2026-31400, CVE-2026-31402, CVE-2026-31403,\nCVE-2026-31405, CVE-2026-31407, CVE-2026-31408, CVE-2026-31409,\nCVE-2026-31411, CVE-2026-31412, CVE-2026-31414, CVE-2026-31415,\nCVE-2026-31416, CVE-2026-31417, CVE-2026-31418, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31436, CVE-2026-31438, CVE-2026-31439, CVE-2026-31440,\nCVE-2026-31441, CVE-2026-31446, CVE-2026-31447, CVE-2026-31448,\nCVE-2026-31449, CVE-2026-31450, CVE-2026-31451, CVE-2026-31452,\nCVE-2026-31453, CVE-2026-31454, CVE-2026-31455, CVE-2026-31458,\nCVE-2026-31464, CVE-2026-31466, CVE-2026-31467, CVE-2026-31469,\nCVE-2026-31470, CVE-2026-31473, CVE-2026-31474, CVE-2026-31476,\nCVE-2026-31477, CVE-2026-31478, CVE-2026-31480, CVE-2026-31482,\nCVE-2026-31483, CVE-2026-31485, CVE-2026-31487, CVE-2026-31488,\nCVE-2026-31489, CVE-2026-31492, CVE-2026-31494, CVE-2026-31495,\nCVE-2026-31496, CVE-2026-31497, CVE-2026-31498, CVE-2026-31499,\nCVE-2026-31500, CVE-2026-31502, CVE-2026-31503, CVE-2026-31505,\nCVE-2026-31506, CVE-2026-31507, CVE-2026-31508, CVE-2026-31509,\nCVE-2026-31510, CVE-2026-31511, CVE-2026-31512, CVE-2026-31515,\nCVE-2026-31516, CVE-2026-31518, CVE-2026-31519, CVE-2026-31520,\nCVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524,\nCVE-2026-31525, CVE-2026-31527, CVE-2026-31528, CVE-2026-31530,\nCVE-2026-31532, CVE-2026-31540, CVE-2026-31542, CVE-2026-31545,\nCVE-2026-31546, CVE-2026-31548, CVE-2026-31549, CVE-2026-31550,\nCVE-2026-31551, CVE-2026-31552, CVE-2026-31554, CVE-2026-31555,\nCVE-2026-31556, CVE-2026-31557, CVE-2026-31563, CVE-2026-31565,\nCVE-2026-31566, CVE-2026-31570, CVE-2026-31575, CVE-2026-31576,\nCVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581,\nCVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585,\nCVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590,\nCVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597,\nCVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603,\nCVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607,\nCVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613,\nCVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618,\nCVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,\nCVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628,\nCVE-2026-31629, CVE-2026-31634, CVE-2026-31637, CVE-2026-31638,\nCVE-2026-31639, CVE-2026-31642, CVE-2026-31645, CVE-2026-31646,\nCVE-2026-31648, CVE-2026-31649, CVE-2026-31651, CVE-2026-31655,\nCVE-2026-31656, CVE-2026-31657, CVE-2026-31658, CVE-2026-31659,\nCVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664,\nCVE-2026-31665, CVE-2026-31667, CVE-2026-31668, CVE-2026-31669,\nCVE-2026-31670, CVE-2026-31671, CVE-2026-31672, CVE-2026-31673,\nCVE-2026-31674, CVE-2026-31675, CVE-2026-31677, CVE-2026-31678,\nCVE-2026-31679, CVE-2026-31680, CVE-2026-31681, CVE-2026-31682,\nCVE-2026-31683, CVE-2026-31684, CVE-2026-31685, CVE-2026-31686,\nCVE-2026-31687, CVE-2026-31689, CVE-2026-31693, CVE-2026-31694,\nCVE-2026-31695, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698,\nCVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702,\nCVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31714, CVE-2026-31715, CVE-2026-31716, CVE-2026-31720,\nCVE-2026-31721, CVE-2026-31722, CVE-2026-31723, CVE-2026-31724,\nCVE-2026-31725, CVE-2026-31726, CVE-2026-31728, CVE-2026-31729,\nCVE-2026-31730, CVE-2026-31731, CVE-2026-31737, CVE-2026-31738,\nCVE-2026-31740, CVE-2026-31741, CVE-2026-31747, CVE-2026-31748,\nCVE-2026-31749, CVE-2026-31751, CVE-2026-31752, CVE-2026-31754,\nCVE-2026-31755, CVE-2026-31756, CVE-2026-31758, CVE-2026-31759,\nCVE-2026-31761, CVE-2026-31762, CVE-2026-31763, CVE-2026-31767,\nCVE-2026-31768, CVE-2026-31770, CVE-2026-31772, CVE-2026-31773,\nCVE-2026-31778, CVE-2026-31779, CVE-2026-31780, CVE-2026-31781,\nCVE-2026-31788, CVE-2026-43007, CVE-2026-43011, CVE-2026-43012,\nCVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016,\nCVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020,\nCVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026,\nCVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,\nCVE-2026-43035, CVE-2026-43036, CVE-2026-43037, CVE-2026-43038,\nCVE-2026-43040, CVE-2026-43041, CVE-2026-43043, CVE-2026-43044,\nCVE-2026-43046, CVE-2026-43047, CVE-2026-43049, CVE-2026-43050,\nCVE-2026-43051, CVE-2026-43052, CVE-2026-43054, CVE-2026-43056,\nCVE-2026-43057, CVE-2026-43058, CVE-2026-43059, CVE-2026-43060,\nCVE-2026-43061, CVE-2026-43062, CVE-2026-43064, CVE-2026-43065,\nCVE-2026-43066, CVE-2026-43068, CVE-2026-43069, CVE-2026-43071,\nCVE-2026-43072, CVE-2026-43073, CVE-2026-43074, CVE-2026-43075,\nCVE-2026-43076, CVE-2026-43079, CVE-2026-43080, CVE-2026-43081,\nCVE-2026-43082, CVE-2026-43085, CVE-2026-43086, CVE-2026-43088,\nCVE-2026-43089, CVE-2026-43091, CVE-2026-43092, CVE-2026-43093,\nCVE-2026-43094, CVE-2026-43098, CVE-2026-43099, CVE-2026-43103,\nCVE-2026-43104, CVE-2026-43105, CVE-2026-43107, CVE-2026-43109,\nCVE-2026-43110, CVE-2026-43111, CVE-2026-43112, CVE-2026-43113,\nCVE-2026-43114, CVE-2026-43117, CVE-2026-43119, CVE-2026-43120,\nCVE-2026-43123, CVE-2026-43124, CVE-2026-43128, CVE-2026-43129,\nCVE-2026-43130, CVE-2026-43132, CVE-2026-43133, CVE-2026-43134,\nCVE-2026-43135, CVE-2026-43136, CVE-2026-43137, CVE-2026-43139,\nCVE-2026-43140, CVE-2026-43141, CVE-2026-43143, CVE-2026-43145,\nCVE-2026-43147, CVE-2026-43148, CVE-2026-43149, CVE-2026-43150,\nCVE-2026-43152, CVE-2026-43153, CVE-2026-43156, CVE-2026-43157,\nCVE-2026-43158, CVE-2026-43159, CVE-2026-43162, CVE-2026-43163,\nCVE-2026-43167, CVE-2026-43168, CVE-2026-43169, CVE-2026-43170,\nCVE-2026-43171, CVE-2026-43173, CVE-2026-43175, CVE-2026-43180,\nCVE-2026-43182, CVE-2026-43183, CVE-2026-43184, CVE-2026-43185,\nCVE-2026-43186, CVE-2026-43187, CVE-2026-43189, CVE-2026-43190,\nCVE-2026-43194, CVE-2026-43196, CVE-2026-43199, CVE-2026-43200,\nCVE-2026-43201, CVE-2026-43202, CVE-2026-43203, CVE-2026-43205,\nCVE-2026-43206, CVE-2026-43207, CVE-2026-43209, CVE-2026-43211,\nCVE-2026-43212, CVE-2026-43214, CVE-2026-43215, CVE-2026-43218,\nCVE-2026-43221, CVE-2026-43222, CVE-2026-43223, CVE-2026-43225,\nCVE-2026-43226, CVE-2026-43227, CVE-2026-43230, CVE-2026-43231,\nCVE-2026-43232, CVE-2026-43233, CVE-2026-43236, CVE-2026-43238,\nCVE-2026-43239, CVE-2026-43241, CVE-2026-43242, CVE-2026-43244,\nCVE-2026-43245, CVE-2026-43246, CVE-2026-43248, CVE-2026-43249,\nCVE-2026-43250, CVE-2026-43251, CVE-2026-43252, CVE-2026-43253,\nCVE-2026-43255, CVE-2026-43256, CVE-2026-43257, CVE-2026-43258,\nCVE-2026-43261, CVE-2026-43262, CVE-2026-43264, CVE-2026-43265,\nCVE-2026-43266, CVE-2026-43268, CVE-2026-43269, CVE-2026-43270,\nCVE-2026-43271, CVE-2026-43273, CVE-2026-43275, CVE-2026-43277,\nCVE-2026-43278, CVE-2026-43279, CVE-2026-43281, CVE-2026-43283,\nCVE-2026-43287, CVE-2026-43288, CVE-2026-43289, CVE-2026-43291,\nCVE-2026-43295, CVE-2026-43296, CVE-2026-43297, CVE-2026-43300,\nCVE-2026-43302, CVE-2026-43304, CVE-2026-43312, CVE-2026-43313,\nCVE-2026-43314, CVE-2026-43315, CVE-2026-43316, CVE-2026-43317,\nCVE-2026-43318, CVE-2026-43319, CVE-2026-43320, CVE-2026-43324,\nCVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330,\nCVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,\nCVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43341,\nCVE-2026-43342, CVE-2026-43343, CVE-2026-43345, CVE-2026-43350,\nCVE-2026-43355, CVE-2026-43357, CVE-2026-43359, CVE-2026-43360,\nCVE-2026-43361, CVE-2026-43362, CVE-2026-43363, CVE-2026-43365,\nCVE-2026-43366, CVE-2026-43368, CVE-2026-43370, CVE-2026-43372,\nCVE-2026-43373, CVE-2026-43377, CVE-2026-43378, CVE-2026-43380,\nCVE-2026-43381, CVE-2026-43382, CVE-2026-43383, CVE-2026-43384,\nCVE-2026-43386, CVE-2026-43387, CVE-2026-43395, CVE-2026-43397,\nCVE-2026-43405, CVE-2026-43406, CVE-2026-43407, CVE-2026-43408,\nCVE-2026-43409, CVE-2026-43411, CVE-2026-43412, CVE-2026-43413,\nCVE-2026-43414, CVE-2026-43415, CVE-2026-43419, CVE-2026-43420,\nCVE-2026-43421, CVE-2026-43424, CVE-2026-43425, CVE-2026-43426,\nCVE-2026-43427, CVE-2026-43428, CVE-2026-43429, CVE-2026-43430,\nCVE-2026-43432, CVE-2026-43436, CVE-2026-43437, CVE-2026-43439,\nCVE-2026-43441, CVE-2026-43445, CVE-2026-43448, CVE-2026-43449,\nCVE-2026-43450, CVE-2026-43451, CVE-2026-43452, CVE-2026-43453,\nCVE-2026-43455, CVE-2026-43456, CVE-2026-43457, CVE-2026-43458,\nCVE-2026-43459, CVE-2026-43466, CVE-2026-43467, CVE-2026-43468,\nCVE-2026-43469, CVE-2026-43471, CVE-2026-43472, CVE-2026-43473,\nCVE-2026-43475, CVE-2026-43476, CVE-2026-43480, CVE-2026-43483,\nCVE-2026-43484, CVE-2026-43488, CVE-2026-43490, CVE-2026-43491,\nCVE-2026-43492, CVE-2026-43493, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43499, CVE-2026-43501, CVE-2026-43502,\nCVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-45847, CVE-2026-45848, CVE-2026-45849, CVE-2026-45851,\nCVE-2026-45852, CVE-2026-45855, CVE-2026-45856, CVE-2026-45857,\nCVE-2026-45858, CVE-2026-45859, CVE-2026-45860, CVE-2026-45861,\nCVE-2026-45862, CVE-2026-45864, CVE-2026-45865, CVE-2026-45866,\nCVE-2026-45867, CVE-2026-45868, CVE-2026-45869, CVE-2026-45870,\nCVE-2026-45871, CVE-2026-45872, CVE-2026-45873, CVE-2026-45875,\nCVE-2026-45877, CVE-2026-45878, CVE-2026-45879, CVE-2026-45880,\nCVE-2026-45881, CVE-2026-45882, CVE-2026-45883, CVE-2026-45884,\nCVE-2026-45885, CVE-2026-45886, CVE-2026-45890, CVE-2026-45891,\nCVE-2026-45893, CVE-2026-45895, CVE-2026-45899, CVE-2026-45902,\nCVE-2026-45904, CVE-2026-45905, CVE-2026-45910, CVE-2026-45911,\nCVE-2026-45912, CVE-2026-45913, CVE-2026-45914, CVE-2026-45915,\nCVE-2026-45916, CVE-2026-45917, CVE-2026-45919, CVE-2026-45920,\nCVE-2026-45921, CVE-2026-45923, CVE-2026-45924, CVE-2026-45928,\nCVE-2026-45935, CVE-2026-45936, CVE-2026-45938, CVE-2026-45941,\nCVE-2026-45942, CVE-2026-45943, CVE-2026-45946, CVE-2026-45947,\nCVE-2026-45948, CVE-2026-45954, CVE-2026-45956, CVE-2026-45957,\nCVE-2026-45958, CVE-2026-45960, CVE-2026-45962, CVE-2026-45964,\nCVE-2026-45965, CVE-2026-45968, CVE-2026-45969, CVE-2026-45970,\nCVE-2026-45972, CVE-2026-45973, CVE-2026-45974, CVE-2026-45976,\nCVE-2026-45978, CVE-2026-45981, CVE-2026-45982, CVE-2026-45983,\nCVE-2026-45984, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987,\nCVE-2026-45988, CVE-2026-45989, CVE-2026-45991, CVE-2026-45994,\nCVE-2026-45996, CVE-2026-45997, CVE-2026-45999, CVE-2026-46002,\nCVE-2026-46003, CVE-2026-46004, CVE-2026-46005, CVE-2026-46006,\nCVE-2026-46007, CVE-2026-46009, CVE-2026-46011, CVE-2026-46012,\nCVE-2026-46015, CVE-2026-46016, CVE-2026-46018, CVE-2026-46019,\nCVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024,\nCVE-2026-46026, CVE-2026-46027, CVE-2026-46031, CVE-2026-46033,\nCVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46041,\nCVE-2026-46043, CVE-2026-46044, CVE-2026-46046, CVE-2026-46047,\nCVE-2026-46049, CVE-2026-46050, CVE-2026-46051, CVE-2026-46052,\nCVE-2026-46053, CVE-2026-46056, CVE-2026-46058, CVE-2026-46061,\nCVE-2026-46062, CVE-2026-46063, CVE-2026-46064, CVE-2026-46065,\nCVE-2026-46068, CVE-2026-46069, CVE-2026-46070, CVE-2026-46072,\nCVE-2026-46073, CVE-2026-46075, CVE-2026-46076, CVE-2026-46077,\nCVE-2026-46078, CVE-2026-46079, CVE-2026-46080, CVE-2026-46082,\nCVE-2026-46083, CVE-2026-46084, CVE-2026-46086, CVE-2026-46088,\nCVE-2026-46089, CVE-2026-46090, CVE-2026-46091, CVE-2026-46092,\nCVE-2026-46094, CVE-2026-46098, CVE-2026-46099, CVE-2026-46101,\nCVE-2026-46102, CVE-2026-46103, CVE-2026-46106, CVE-2026-46107,\nCVE-2026-46108, CVE-2026-46110, CVE-2026-46111, CVE-2026-46112,\nCVE-2026-46113, CVE-2026-46114, CVE-2026-46115, CVE-2026-46116,\nCVE-2026-46117, CVE-2026-46119, CVE-2026-46120, CVE-2026-46121,\nCVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125,\nCVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129,\nCVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46135,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145,\nCVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151,\nCVE-2026-46152, CVE-2026-46157, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46163, CVE-2026-46164, CVE-2026-46167,\nCVE-2026-46168, CVE-2026-46169, CVE-2026-46172, CVE-2026-46173,\nCVE-2026-46174, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178,\nCVE-2026-46179, CVE-2026-46180, CVE-2026-46184, CVE-2026-46185,\nCVE-2026-46186, CVE-2026-46187, CVE-2026-46189, CVE-2026-46190,\nCVE-2026-46191, CVE-2026-46193, CVE-2026-46194, CVE-2026-46195,\nCVE-2026-46196, CVE-2026-46197, CVE-2026-46198, CVE-2026-46199,\nCVE-2026-46200, CVE-2026-46201, CVE-2026-46204, CVE-2026-46205,\nCVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209,\nCVE-2026-46211, CVE-2026-46212, CVE-2026-46214, CVE-2026-46218,\nCVE-2026-46219, CVE-2026-46220, CVE-2026-46225, CVE-2026-46226,\nCVE-2026-46227, CVE-2026-46229, CVE-2026-46230, CVE-2026-46231,\nCVE-2026-46232, CVE-2026-46233, CVE-2026-46234, CVE-2026-46235,\nCVE-2026-46236, CVE-2026-46238, CVE-2026-46241, CVE-2026-46243,\nCVE-2026-46244, CVE-2026-46246, CVE-2026-46247, CVE-2026-46249,\nCVE-2026-46250, CVE-2026-46251, CVE-2026-46253, CVE-2026-46254,\nCVE-2026-46255, CVE-2026-46259, CVE-2026-46260, CVE-2026-46261,\nCVE-2026-46265, CVE-2026-46266, CVE-2026-46267, CVE-2026-46270,\nCVE-2026-46273, CVE-2026-46274, CVE-2026-46280, CVE-2026-46282,\nCVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46289,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294,\nCVE-2026-46296, CVE-2026-46299, CVE-2026-46301, CVE-2026-46303,\nCVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46312,\nCVE-2026-46314, CVE-2026-46319, CVE-2026-46328, CVE-2026-52911,\nCVE-2026-52920, CVE-2026-52925, CVE-2026-52933, CVE-2026-52936,\nCVE-2026-52951, CVE-2026-52954, CVE-2026-52955, CVE-2026-52957,\nCVE-2026-52958, CVE-2026-52961, CVE-2026-52962, CVE-2026-52963,\nCVE-2026-52964, CVE-2026-52967, CVE-2026-52968, CVE-2026-52969,\nCVE-2026-52970, CVE-2026-52974, CVE-2026-52975, CVE-2026-52977,\nCVE-2026-52981, CVE-2026-52982, CVE-2026-52984, CVE-2026-52985,\nCVE-2026-52986, CVE-2026-52989, CVE-2026-52990, CVE-2026-52992,\nCVE-2026-52993, CVE-2026-52995, CVE-2026-52998, CVE-2026-52999,\nCVE-2026-53001, CVE-2026-53002, CVE-2026-53003, CVE-2026-53004,\nCVE-2026-53006, CVE-2026-53011, CVE-2026-53012, CVE-2026-53013,\nCVE-2026-53014, CVE-2026-53015, CVE-2026-53016, CVE-2026-53021,\nCVE-2026-53022, CVE-2026-53023, CVE-2026-53032, CVE-2026-53033,\nCVE-2026-53034, CVE-2026-53035, CVE-2026-53036, CVE-2026-53037,\nCVE-2026-53039, CVE-2026-53040, CVE-2026-53041, CVE-2026-53043,\nCVE-2026-53045, CVE-2026-53046, CVE-2026-53047, CVE-2026-53048,\nCVE-2026-53049, CVE-2026-53050, CVE-2026-53052, CVE-2026-53056,\nCVE-2026-53058, CVE-2026-53059, CVE-2026-53060, CVE-2026-53061,\nCVE-2026-53062, CVE-2026-53063, CVE-2026-53064, CVE-2026-53065,\nCVE-2026-53066, CVE-2026-53068, CVE-2026-53069, CVE-2026-53071,\nCVE-2026-53072, CVE-2026-53073, CVE-2026-53074, CVE-2026-53075,\nCVE-2026-53076, CVE-2026-53077, CVE-2026-53082, CVE-2026-53083,\nCVE-2026-53084, CVE-2026-53085, CVE-2026-53086, CVE-2026-53088,\nCVE-2026-53093, CVE-2026-53094, CVE-2026-53096, CVE-2026-53097,\nCVE-2026-53098, CVE-2026-53110, CVE-2026-53111, CVE-2026-53112,\nCVE-2026-53115, CVE-2026-53117, CVE-2026-53122, CVE-2026-53123,\nCVE-2026-53126, CVE-2026-53128, CVE-2026-53130, CVE-2026-53279,\nCVE-2026-53287, CVE-2026-53289, CVE-2026-53291, CVE-2026-53293,\nCVE-2026-53294, CVE-2026-53295, CVE-2026-53296, CVE-2026-53303,\nCVE-2026-53304, CVE-2026-53306, CVE-2026-53309, CVE-2026-53314,\nCVE-2026-53320, CVE-2026-53369, CVE-2026-53374, CVE-2026-53375,\nCVE-2026-53376, CVE-2026-53379, CVE-2026-63838, CVE-2026-63843,\nCVE-2026-63844, CVE-2026-63845, CVE-2026-63846, CVE-2026-63847,\nCVE-2026-63848, CVE-2026-63851, CVE-2026-63852, CVE-2026-63854,\nCVE-2026-63855, CVE-2026-63856, CVE-2026-63860, CVE-2026-63861,\nCVE-2026-63862, CVE-2026-63865)\n","status":"published","published":"2026-07-28T07:28:45Z","modified":"2026-11-07T01:45:56.683802514Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8665-1","title":"linux-raspi, linux-raspi-realtime vulnerabilities","description":"It was discovered that some AMD processors did not properly clear data in\nthe floating point divider unit during speculative execution. A local\nattacker could use this to expose sensitive information. (CVE-2025-54505)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nIt was discovered that some AMD Zen 5 processors supporting RDSEED\ninstruction did not properly handle entropy, potentially resulting in the\nconsumption of insufficiently random values. A local attacker could\npossibly use this issue to influence the values returned by the RDSEED\ninstruction causing loss of confidentiality and integrity. (CVE-2025-62626)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Power management core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - Counter interface drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - EFI core;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MediaTek SMI driver;\n  - NVIDIA Tegra memory controller driver;\n  - Fastrpc Driver;\n  - IBM Advanced System Management driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Ethernet team driver;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Broadcom BCM2835 power domain driver;\n  - Generic PM domains;\n  - i.MX PM domains;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - Freescale SoC drivers;\n  - Microchip PolarFire SoC system controller driver;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - SM750 framebuffer staging driver;\n  - TCM subsystem;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB YUREX driver;\n  - Renesas USBHS Controller drivers;\n  - USB Type-C Connector System Software Interface driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM TDX Guest driver;\n  - Xen hypervisor drivers;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Diskquota system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Kernel CPU control infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Memory Management;\n  - Integrity Measurement Architecture(IMA) framework;\n  - KVM subsystem;\n  - Memory management;\n  - Networking core;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Linux Security Modules (LSM) Framework;\n  - Tracing infrastructure;\n  - Network traffic control;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KProbes tracing;\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - Cryptographic library;\n  - Heterogeneous memory management;\n  - KASAN memory debugging framework;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAIF protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - Management Component Transport Protocol (MCTP);\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RF switch subsystem;\n  - Rose network layer;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Stream parser;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - Landlock security;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Creative Sound Blaster X-Fi driver;\n  - AMD SoC Alsa drivers;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - Samsung ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Objtool;\n(CVE-2025-21709, CVE-2025-22116, CVE-2025-38426, CVE-2025-39764,\nCVE-2025-40135, CVE-2025-40150, CVE-2025-68175, CVE-2025-68239,\nCVE-2025-68334, CVE-2025-68736, CVE-2025-71152, CVE-2025-71161,\nCVE-2025-71203, CVE-2025-71221, CVE-2025-71269, CVE-2025-71287,\nCVE-2025-71288, CVE-2026-22981, CVE-2026-22985, CVE-2026-22993,\nCVE-2026-23004, CVE-2026-23066, CVE-2026-23104, CVE-2026-23118,\nCVE-2026-23138, CVE-2026-23154, CVE-2026-23157, CVE-2026-23171,\nCVE-2026-23207, CVE-2026-23226, CVE-2026-23227, CVE-2026-23244,\nCVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23255,\nCVE-2026-23270, CVE-2026-23271, CVE-2026-23276, CVE-2026-23277,\nCVE-2026-23279, CVE-2026-23281, CVE-2026-23284, CVE-2026-23285,\nCVE-2026-23286, CVE-2026-23287, CVE-2026-23289, CVE-2026-23290,\nCVE-2026-23291, CVE-2026-23292, CVE-2026-23293, CVE-2026-23296,\nCVE-2026-23298, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303,\nCVE-2026-23304, CVE-2026-23306, CVE-2026-23307, CVE-2026-23308,\nCVE-2026-23310, CVE-2026-23312, CVE-2026-23313, CVE-2026-23315,\nCVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321,\nCVE-2026-23324, CVE-2026-23325, CVE-2026-23330, CVE-2026-23334,\nCVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,\nCVE-2026-23343, CVE-2026-23347, CVE-2026-23352, CVE-2026-23356,\nCVE-2026-23357, CVE-2026-23359, CVE-2026-23360, CVE-2026-23361,\nCVE-2026-23362, CVE-2026-23363, CVE-2026-23364, CVE-2026-23365,\nCVE-2026-23367, CVE-2026-23368, CVE-2026-23369, CVE-2026-23370,\nCVE-2026-23372, CVE-2026-23374, CVE-2026-23375, CVE-2026-23378,\nCVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23383,\nCVE-2026-23386, CVE-2026-23387, CVE-2026-23388, CVE-2026-23389,\nCVE-2026-23391, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,\nCVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412,\nCVE-2026-23413, CVE-2026-23414, CVE-2026-23418, CVE-2026-23419,\nCVE-2026-23420, CVE-2026-23426, CVE-2026-23434, CVE-2026-23438,\nCVE-2026-23439, CVE-2026-23440, CVE-2026-23441, CVE-2026-23442,\nCVE-2026-23444, CVE-2026-23446, CVE-2026-23447, CVE-2026-23448,\nCVE-2026-23449, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,\nCVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23461,\nCVE-2026-23462, CVE-2026-23463, CVE-2026-23464, CVE-2026-23465,\nCVE-2026-23468, CVE-2026-23470, CVE-2026-23474, CVE-2026-23475,\nCVE-2026-31389, CVE-2026-31391, CVE-2026-31392, CVE-2026-31393,\nCVE-2026-31394, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,\nCVE-2026-31403, CVE-2026-31405, CVE-2026-31407, CVE-2026-31408,\nCVE-2026-31409, CVE-2026-31412, CVE-2026-31413, CVE-2026-31414,\nCVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,\nCVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,\nCVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31429,\nCVE-2026-31430, CVE-2026-31432, CVE-2026-31433, CVE-2026-31434,\nCVE-2026-31438, CVE-2026-31439, CVE-2026-31440, CVE-2026-31441,\nCVE-2026-31446, CVE-2026-31447, CVE-2026-31449, CVE-2026-31450,\nCVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454,\nCVE-2026-31455, CVE-2026-31458, CVE-2026-31464, CVE-2026-31466,\nCVE-2026-31467, CVE-2026-31469, CVE-2026-31470, CVE-2026-31473,\nCVE-2026-31474, CVE-2026-31476, CVE-2026-31477, CVE-2026-31480,\nCVE-2026-31482, CVE-2026-31483, CVE-2026-31485, CVE-2026-31487,\nCVE-2026-31488, CVE-2026-31489, CVE-2026-31492, CVE-2026-31494,\nCVE-2026-31495, CVE-2026-31496, CVE-2026-31497, CVE-2026-31498,\nCVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31503,\nCVE-2026-31505, CVE-2026-31507, CVE-2026-31508, CVE-2026-31509,\nCVE-2026-31510, CVE-2026-31511, CVE-2026-31512, CVE-2026-31515,\nCVE-2026-31516, CVE-2026-31518, CVE-2026-31519, CVE-2026-31520,\nCVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524,\nCVE-2026-31525, CVE-2026-31527, CVE-2026-31528, CVE-2026-31530,\nCVE-2026-31532, CVE-2026-31540, CVE-2026-31542, CVE-2026-31545,\nCVE-2026-31546, CVE-2026-31548, CVE-2026-31549, CVE-2026-31550,\nCVE-2026-31551, CVE-2026-31552, CVE-2026-31554, CVE-2026-31555,\nCVE-2026-31556, CVE-2026-31557, CVE-2026-31563, CVE-2026-31565,\nCVE-2026-31566, CVE-2026-31570, CVE-2026-31575, CVE-2026-31576,\nCVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581,\nCVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585,\nCVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590,\nCVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597,\nCVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603,\nCVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31610,\nCVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31615,\nCVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619,\nCVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625,\nCVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629,\nCVE-2026-31634, CVE-2026-31638, CVE-2026-31639, CVE-2026-31642,\nCVE-2026-31645, CVE-2026-31646, CVE-2026-31648, CVE-2026-31651,\nCVE-2026-31655, CVE-2026-31656, CVE-2026-31658, CVE-2026-31660,\nCVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665,\nCVE-2026-31667, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672,\nCVE-2026-31673, CVE-2026-31674, CVE-2026-31675, CVE-2026-31677,\nCVE-2026-31678, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,\nCVE-2026-31683, CVE-2026-31684, CVE-2026-31686, CVE-2026-31689,\nCVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,\nCVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701,\nCVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706,\nCVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711,\nCVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716,\nCVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723,\nCVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728,\nCVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737,\nCVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747,\nCVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,\nCVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,\nCVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,\nCVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772,\nCVE-2026-31773, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780,\nCVE-2026-31781, CVE-2026-31788, CVE-2026-43007, CVE-2026-43012,\nCVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016,\nCVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020,\nCVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026,\nCVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,\nCVE-2026-43035, CVE-2026-43036, CVE-2026-43040, CVE-2026-43041,\nCVE-2026-43043, CVE-2026-43044, CVE-2026-43046, CVE-2026-43047,\nCVE-2026-43049, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052,\nCVE-2026-43054, CVE-2026-43056, CVE-2026-43057, CVE-2026-43058,\nCVE-2026-43059, CVE-2026-43060, CVE-2026-43061, CVE-2026-43062,\nCVE-2026-43064, CVE-2026-43065, CVE-2026-43066, CVE-2026-43068,\nCVE-2026-43069, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074,\nCVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080,\nCVE-2026-43081, CVE-2026-43082, CVE-2026-43084, CVE-2026-43085,\nCVE-2026-43086, CVE-2026-43088, CVE-2026-43089, CVE-2026-43091,\nCVE-2026-43092, CVE-2026-43093, CVE-2026-43094, CVE-2026-43098,\nCVE-2026-43099, CVE-2026-43103, CVE-2026-43104, CVE-2026-43105,\nCVE-2026-43107, CVE-2026-43109, CVE-2026-43110, CVE-2026-43111,\nCVE-2026-43112, CVE-2026-43113, CVE-2026-43119, CVE-2026-43120,\nCVE-2026-43129, CVE-2026-43162, CVE-2026-43245, CVE-2026-43252,\nCVE-2026-43265, CVE-2026-43281, CVE-2026-43324, CVE-2026-43327,\nCVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332,\nCVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338,\nCVE-2026-43339, CVE-2026-43340, CVE-2026-43342, CVE-2026-43343,\nCVE-2026-43345, CVE-2026-43350, CVE-2026-43355, CVE-2026-43357,\nCVE-2026-43359, CVE-2026-43360, CVE-2026-43361, CVE-2026-43362,\nCVE-2026-43363, CVE-2026-43365, CVE-2026-43366, CVE-2026-43368,\nCVE-2026-43370, CVE-2026-43371, CVE-2026-43372, CVE-2026-43373,\nCVE-2026-43377, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,\nCVE-2026-43386, CVE-2026-43387, CVE-2026-43395, CVE-2026-43397,\nCVE-2026-43405, CVE-2026-43408, CVE-2026-43409, CVE-2026-43411,\nCVE-2026-43412, CVE-2026-43413, CVE-2026-43415, CVE-2026-43419,\nCVE-2026-43420, CVE-2026-43421, CVE-2026-43424, CVE-2026-43425,\nCVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429,\nCVE-2026-43430, CVE-2026-43432, CVE-2026-43436, CVE-2026-43437,\nCVE-2026-43439, CVE-2026-43441, CVE-2026-43445, CVE-2026-43448,\nCVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,\nCVE-2026-43453, CVE-2026-43455, CVE-2026-43456, CVE-2026-43457,\nCVE-2026-43458, CVE-2026-43459, CVE-2026-43466, CVE-2026-43467,\nCVE-2026-43468, CVE-2026-43469, CVE-2026-43471, CVE-2026-43472,\nCVE-2026-43473, CVE-2026-43475, CVE-2026-43476, CVE-2026-43480,\nCVE-2026-43483, CVE-2026-43484, CVE-2026-43488, CVE-2026-43490,\nCVE-2026-43491, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43499, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,\nCVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,\nCVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45855,\nCVE-2026-45858, CVE-2026-45899, CVE-2026-45911, CVE-2026-45920,\nCVE-2026-45924, CVE-2026-45942, CVE-2026-45943, CVE-2026-45956,\nCVE-2026-45958, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987,\nCVE-2026-45989, CVE-2026-45991, CVE-2026-45994, CVE-2026-45996,\nCVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003,\nCVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007,\nCVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015,\nCVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021,\nCVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026,\nCVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037,\nCVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46044,\nCVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050,\nCVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056,\nCVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063,\nCVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069,\nCVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075,\nCVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079,\nCVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084,\nCVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090,\nCVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098,\nCVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103,\nCVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110,\nCVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46120, CVE-2026-46121,\nCVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125,\nCVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129,\nCVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46136,\nCVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142,\nCVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161,\nCVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174,\nCVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179,\nCVE-2026-46180, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193,\nCVE-2026-46196, CVE-2026-46197, CVE-2026-46198, CVE-2026-46199,\nCVE-2026-46200, CVE-2026-46201, CVE-2026-46204, CVE-2026-46205,\nCVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209,\nCVE-2026-46211, CVE-2026-46212, CVE-2026-46214, CVE-2026-46218,\nCVE-2026-46219, CVE-2026-46220, CVE-2026-46225, CVE-2026-46226,\nCVE-2026-46227, CVE-2026-46229, CVE-2026-46230, CVE-2026-46231,\nCVE-2026-46232, CVE-2026-46233, CVE-2026-46234, CVE-2026-46235,\nCVE-2026-46236, CVE-2026-46238, CVE-2026-46241, CVE-2026-46273,\nCVE-2026-46274, CVE-2026-46280, CVE-2026-46282, CVE-2026-46285,\nCVE-2026-46286, CVE-2026-46287, CVE-2026-46291, CVE-2026-46292,\nCVE-2026-46293, CVE-2026-46294, CVE-2026-46296, CVE-2026-46299,\nCVE-2026-46301, CVE-2026-46303, CVE-2026-46304, CVE-2026-46306,\nCVE-2026-46307, CVE-2026-46312, CVE-2026-46314, CVE-2026-46319,\nCVE-2026-52911, CVE-2026-52920, CVE-2026-52925, CVE-2026-52933,\nCVE-2026-52936, CVE-2026-52951, CVE-2026-52954, CVE-2026-52955,\nCVE-2026-52957, CVE-2026-52958, CVE-2026-52961, CVE-2026-52962,\nCVE-2026-52963, CVE-2026-52964, CVE-2026-52967, CVE-2026-52968,\nCVE-2026-52969, CVE-2026-52970, CVE-2026-52974, CVE-2026-52975,\nCVE-2026-52977, CVE-2026-52981, CVE-2026-52982, CVE-2026-52984,\nCVE-2026-52985, CVE-2026-52986, CVE-2026-52989, CVE-2026-52990,\nCVE-2026-52992, CVE-2026-52993, CVE-2026-52995, CVE-2026-52998,\nCVE-2026-52999, CVE-2026-53001, CVE-2026-53002, CVE-2026-53003,\nCVE-2026-53004, CVE-2026-53006, CVE-2026-53011, CVE-2026-53012,\nCVE-2026-53013, CVE-2026-53014, CVE-2026-53015, CVE-2026-53016,\nCVE-2026-53021, CVE-2026-53022, CVE-2026-53023, CVE-2026-53032,\nCVE-2026-53033, CVE-2026-53034, CVE-2026-53035, CVE-2026-53036,\nCVE-2026-53037, CVE-2026-53039, CVE-2026-53040, CVE-2026-53041,\nCVE-2026-53043, CVE-2026-53045, CVE-2026-53046, CVE-2026-53047,\nCVE-2026-53048, CVE-2026-53049, CVE-2026-53050, CVE-2026-53052,\nCVE-2026-53056, CVE-2026-53058, CVE-2026-53059, CVE-2026-53060,\nCVE-2026-53061, CVE-2026-53062, CVE-2026-53063, CVE-2026-53064,\nCVE-2026-53065, CVE-2026-53066, CVE-2026-53068, CVE-2026-53069,\nCVE-2026-53071, CVE-2026-53072, CVE-2026-53073, CVE-2026-53074,\nCVE-2026-53075, CVE-2026-53076, CVE-2026-53077, CVE-2026-53082,\nCVE-2026-53083, CVE-2026-53084, CVE-2026-53085, CVE-2026-53086,\nCVE-2026-53088, CVE-2026-53093, CVE-2026-53094, CVE-2026-53096,\nCVE-2026-53097, CVE-2026-53098, CVE-2026-53110, CVE-2026-53111,\nCVE-2026-53112, CVE-2026-53115, CVE-2026-53117, CVE-2026-53122,\nCVE-2026-53123, CVE-2026-53126, CVE-2026-53128, CVE-2026-53130,\nCVE-2026-53279, CVE-2026-53287, CVE-2026-53289, CVE-2026-53291,\nCVE-2026-53293, CVE-2026-53294, CVE-2026-53295, CVE-2026-53296,\nCVE-2026-53303, CVE-2026-53304, CVE-2026-53306, CVE-2026-53309,\nCVE-2026-53314, CVE-2026-53320, CVE-2026-53369, CVE-2026-53374,\nCVE-2026-53375, CVE-2026-53376, CVE-2026-53379, CVE-2026-63838,\nCVE-2026-63843, CVE-2026-63844, CVE-2026-63845, CVE-2026-63846,\nCVE-2026-63847, CVE-2026-63848, CVE-2026-63851, CVE-2026-63852,\nCVE-2026-63854, CVE-2026-63855, CVE-2026-63856, CVE-2026-63860,\nCVE-2026-63861, CVE-2026-63862, CVE-2026-63865, CVE-2026-64164,\nCVE-2026-64587)\n","status":"published","published":"2026-08-20T23:31:14Z","modified":"2026-11-09T12:48:40.63232576Z","updated_at":"2026-11-07T01:56:47.245871Z"}]}}