{"id":"CVE-2026-64388","aliases":["AZL-93753","BELL-CVE-2026-64388","DEBIAN-CVE-2026-64388","EUVD-2026-48932","GHSA-p59x-f8qp-h8m2","OESA-2026-3316","OESA-2026-3453","ROOT-OS-DEBIAN-12-CVE-2026-64388","ROOT-OS-UBUNTU-2204-CVE-2026-64388","SUSE-SU-2026:23477-1","SUSE-SU-2026:23481-1","SUSE-SU-2026:23528-1","SUSE-SU-2026:23529-1","SUSE-SU-2026:24179-1","SUSE-SU-2026:24184-1","SUSE-SU-2026:24197-1","SUSE-SU-2026:24235-1","SUSE-SU-2026:4120-1","SUSE-SU-2026:4254-1","SUSE-SU-2026:4687-1","UBUNTU-CVE-2026-64388","USN-8726-1","USN-8726-2","USN-8726-3","USN-8726-4","USN-8727-1","USN-8728-1","USN-8728-2","USN-8728-3","USN-8760-1","USN-8760-2","USN-8800-1","USN-8886-1","openSUSE-SU-2026:11476-1","openSUSE-SU-2026:22091-1"],"status":"published","title":"smb/client: fix chown/chgrp with SMB3 POSIX Extensions","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00134,"percentile":0.02936,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-682"],"published":"2026-07-25T08:50:36Z","modified":"2026-11-10T02:51:09Z","fixes":[{"ecosystem":"Alpaquita:23","package":"linux-lts","fixed_in":["6.1.191-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"linux-lts","fixed_in":["6.12.115-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-lts","fixed_in":["6.18.58-r0"],"sources":["osv"]},{"ecosystem":"Linux","package":"Kernel","fixed_in":["6.1.191","6.6.160","6.12.114","6.18.57","7.1.4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.12.115-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["7.1.4-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"linux","fixed_in":["6.1.190-1.aikido.167"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-linux","fixed_in":["6.1.190-1.aikido.167"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"linux","fixed_in":["5.15.0-203.213.aikido.119"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"rootio-linux","fixed_in":["5.15.0-203.213.aikido.119"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-7.0","fixed_in":["7.0.0-1012.12~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-7.0","fixed_in":["7.0.0-1014.14~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-7.0","fixed_in":["7.0.0-1013.13~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-7.0","fixed_in":["7.0.0-1011.11~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","fixed_in":["7.0.0-31.31~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-7.0","fixed_in":["7.0.0-1018.18~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","fixed_in":["6.8.0-1036.39"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-7.0","fixed_in":["7.0.0-1011.11~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-7.0","fixed_in":["7.0.0-31.31.1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux","fixed_in":["7.0.0-31.31"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","fixed_in":["7.0.0-1012.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure","fixed_in":["7.0.0-1014.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure-fde","fixed_in":["7.0.0-1013.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","fixed_in":["7.0.0-1011.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-gke","fixed_in":["7.0.0-1006.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","fixed_in":["7.0.0-1013.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia","fixed_in":["7.0.0-1018.18"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia-bos","fixed_in":["7.0.0-2018.18"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","fixed_in":["7.0.0-1013.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","fixed_in":["7.0.0-1011.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-raspi","fixed_in":["7.0.0-1019.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-realtime","fixed_in":["7.0.0-31.31.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-riscv","fixed_in":["7.0.0-31.31.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.161.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.189-r0"},{"fixed":"6.1.191-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.112-r0"},{"fixed":"6.12.115-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.55-r0"},{"fixed":"6.18.58-r0"}]}]},{"source":"osv","ecosystem":"Linux","package":"Kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.18.0"},{"fixed":"6.1.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.114"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.57"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.123-1","6.1.124-1","6.1.128-1","6.1.129-1","6.1.133-1","6.1.135-1","6.1.137-1","6.1.139-1","6.1.140-1","6.1.147-1","6.1.148-1","6.1.153-1","6.1.158-1","6.1.159-1","6.1.162-1","6.1.164-1","6.1.170-1","6.1.170-2","6.1.170-3","6.1.172-1","6.1.174-1","6.1.176-1","6.1.177-1","6.1.180-1","6.1.187-1","6.1.190-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1","6.10-1~exp1","6.10.1-1~exp1","6.10.11-1","6.10.11-1~bpo12+1","6.10.12-1","6.10.3-1","6.10.4-1","6.10.6-1","6.10.6-1~bpo12+1","6.10.7-1","6.10.9-1","6.11-1~exp1","6.11.10-1","6.11.10-1~bpo12+1","6.11.2-1","6.11.4-1","6.11.5-1","6.11.5-1~bpo12+1","6.11.6-1","6.11.7-1","6.11.9-1","6.11~rc4-1~exp1","6.11~rc5-1~exp1","6.12.10-1","6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.11-1","6.12.11-1+alpha","6.12.11-1+alpha.1","6.12.111-1","6.12.113-1","6.12.115-1","6.12.115-2","6.12.12-1","6.12.12-1~bpo12+1","6.12.13-1","6.12.15-1","6.12.16-1","6.12.17-1","6.12.19-1","6.12.20-1","6.12.21-1","6.12.22-1","6.12.22-1~bpo12+1","6.12.25-1","6.12.27-1","6.12.27-1~bpo12+1","6.12.29-1","6.12.3-1","6.12.30-1","6.12.30-1~bpo12+1","6.12.31-1","6.12.32-1","6.12.32-1~bpo12+1","6.12.33-1","6.12.33-1~bpo12+1","6.12.35-1","6.12.35-1~bpo12+1","6.12.37-1","6.12.38-1","6.12.38-1~bpo12+1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.5-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.6-1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.8-1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.9-1","6.12.9-1+alpha","6.12.9-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1","6.12~rc6-1~exp1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.10-1","6.16.11-1","6.16.12-1","6.16.12-1~bpo13+1","6.16.12-2","6.16.3-1","6.16.3-1~bpo13+1","6.16.5-1","6.16.6-1","6.16.7-1","6.16.8-1","6.16.9-1","6.16~rc7-1~exp1","6.17.10-1","6.17.11-1","6.17.12-1","6.17.13-1","6.17.13-1~bpo13+1","6.17.2-1~exp1","6.17.5-1~exp1","6.17.6-1","6.17.7-1","6.17.7-2","6.17.8-1","6.17.8-1~bpo13+1","6.17.9-1","6.18.1-1~exp1","6.18.10-1","6.18.12-1","6.18.12-1~bpo13+1","6.18.13-1","6.18.14-1","6.18.15-1","6.18.15-1~bpo13+1","6.18.2-1~exp1","6.18.3-1","6.18.5-1","6.18.5-1~bpo13+1","6.18.8-1","6.18.9-1","6.18.9-1~bpo13+1","6.18~rc4-1~exp1","6.18~rc4-1~exp2","6.18~rc5-1~exp1","6.18~rc6-1~exp1","6.18~rc7-1~exp1","6.19-1~exp1","6.19.10-1","6.19.10-1~bpo13+1","6.19.11-1","6.19.11-1~bpo13+1","6.19.12-1","6.19.13-1","6.19.13-1~bpo13+1","6.19.14-1","6.19.14-1~bpo13+1","6.19.2-1~exp1","6.19.3-1~exp1","6.19.4-1~exp1","6.19.5-1~exp1","6.19.6-1","6.19.6-2","6.19.6-2~bpo13+1","6.19.8-1","6.19.8-1~bpo13+1","6.19~rc4-1~exp1","6.19~rc5-1~exp1","6.19~rc6-1~exp1","6.19~rc7-1~exp1","6.19~rc8-1~exp1","6.3.1-1~exp1","6.3.11-1","6.3.2-1~exp1","6.3.4-1~exp1","6.3.5-1~exp1","6.3.7-1","6.3.7-1~bpo12+1","6.4.1-1~exp1","6.4.11-1","6.4.13-1","6.4.4-1","6.4.4-1~bpo12+1","6.4.4-2","6.4.4-3","6.4.4-3~bpo12+1","6.4~rc6-1~exp1","6.4~rc7-1~exp1","6.5.1-1~exp1","6.5.10-1","6.5.10-1~bpo12+1","6.5.13-1","6.5.3-1","6.5.3-1~bpo12+1","6.5.6-1","6.5.8-1","6.5~rc4-1~exp1","6.5~rc6-1~exp1","6.5~rc7-1~exp1","6.6.11-1","6.6.13-1","6.6.13-1~bpo12+1","6.6.15-1","6.6.15-2","6.6.3-1~exp1","6.6.4-1~exp1","6.6.7-1~exp1","6.6.8-1","6.6.9-1","6.7-1~exp1","6.7.1-1~exp1","6.7.12-1","6.7.12-1~bpo12+1","6.7.4-1~exp1","6.7.7-1","6.7.9-1","6.7.9-2","6.8.11-1","6.8.12-1","6.8.12-1~bpo12+1","6.8.9-1","6.9.10-1","6.9.10-1~bpo12+1","6.9.11-1","6.9.12-1","6.9.2-1~exp1","6.9.7-1","6.9.7-1~bpo12+1","6.9.8-1","6.9.9-1","7.0-1~exp1","7.0.1-1~exp1","7.0.10-1","7.0.10-1~bpo13+1","7.0.12-1","7.0.12-2","7.0.12-2~bpo13+1","7.0.13-1","7.0.13-1~bpo13+1","7.0.14-1","7.0.3-1","7.0.4-1","7.0.4-1~bpo13+1","7.0.7-1","7.0.7-1~bpo13+1","7.0.9-1","7.0.9-1~bpo13+1","7.1.1-1~exp1","7.1.10-1","7.1.12-1","7.1.13-1","7.1.13-1~bpo13+1","7.1.2-1~exp1","7.1.3-1","7.1.3-1+sunvdc","7.1.3-1~bpo13+1","7.1.4-1","7.1.5-1","7.1.6-1","7.1.7-1","7.1.7-1~bpo13+1","7.1.8-1","7.1.8-1~bpo13+1","7.1.8-2","7.1.9-1","7.1.9-1+sparc64","7.1~rc2-1~exp1","7.1~rc3-1~exp1","7.1~rc4-1~exp1","7.1~rc4-1~exp2","7.1~rc5-1~exp1","7.1~rc7-1~exp1","7.2.10-1","7.2.11-1","7.2.11-1~bpo13+1","7.2.12-1","7.2.13-1","7.2.14-1","7.2.15-1","7.2.2-1~exp1","7.2.3-1~exp1","7.2.6-1","7.2.6-1~bpo13+1","7.2.7-1","7.2.8-1","7.2.9-1","7.2.9-1~bpo13+1","7.2~rc3-1~exp1","7.2~rc5-1~exp1","7.2~rc7-1~exp1","7.3.1-1~exp1","7.3~rc6-1~exp1","7.3~rc7-1~exp1"]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.115-2"}]}],"versions":["6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.111-1","6.12.113-1","6.12.115-1","6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1"]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.4-1"}]}],"versions":["6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.111-1","6.12.113-1","6.12.115-1","6.12.115-2","6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.10-1","6.16.11-1","6.16.12-1","6.16.12-1~bpo13+1","6.16.12-2","6.16.3-1","6.16.3-1~bpo13+1","6.16.5-1","6.16.6-1","6.16.7-1","6.16.8-1","6.16.9-1","6.16~rc7-1~exp1","6.17.10-1","6.17.11-1","6.17.12-1","6.17.13-1","6.17.13-1~bpo13+1","6.17.2-1~exp1","6.17.5-1~exp1","6.17.6-1","6.17.7-1","6.17.7-2","6.17.8-1","6.17.8-1~bpo13+1","6.17.9-1","6.18.1-1~exp1","6.18.10-1","6.18.12-1","6.18.12-1~bpo13+1","6.18.13-1","6.18.14-1","6.18.15-1","6.18.15-1~bpo13+1","6.18.2-1~exp1","6.18.3-1","6.18.5-1","6.18.5-1~bpo13+1","6.18.8-1","6.18.9-1","6.18.9-1~bpo13+1","6.18~rc4-1~exp1","6.18~rc4-1~exp2","6.18~rc5-1~exp1","6.18~rc6-1~exp1","6.18~rc7-1~exp1","6.19-1~exp1","6.19.10-1","6.19.10-1~bpo13+1","6.19.11-1","6.19.11-1~bpo13+1","6.19.12-1","6.19.13-1","6.19.13-1~bpo13+1","6.19.14-1","6.19.14-1~bpo13+1","6.19.2-1~exp1","6.19.3-1~exp1","6.19.4-1~exp1","6.19.5-1~exp1","6.19.6-1","6.19.6-2","6.19.6-2~bpo13+1","6.19.8-1","6.19.8-1~bpo13+1","6.19~rc4-1~exp1","6.19~rc5-1~exp1","6.19~rc6-1~exp1","6.19~rc7-1~exp1","6.19~rc8-1~exp1","7.0-1~exp1","7.0.1-1~exp1","7.0.10-1","7.0.10-1~bpo13+1","7.0.12-1","7.0.12-2","7.0.12-2~bpo13+1","7.0.13-1","7.0.13-1~bpo13+1","7.0.14-1","7.0.3-1","7.0.4-1","7.0.4-1~bpo13+1","7.0.7-1","7.0.7-1~bpo13+1","7.0.9-1","7.0.9-1~bpo13+1","7.1.1-1~exp1","7.1.2-1~exp1","7.1.3-1","7.1.3-1+sunvdc","7.1.3-1~bpo13+1","7.1~rc2-1~exp1","7.1~rc3-1~exp1","7.1~rc4-1~exp1","7.1~rc4-1~exp2","7.1~rc5-1~exp1","7.1~rc7-1~exp1"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.90-2608.3.0.0385.oe2003sp4"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-329.0.0.230.oe2203sp4"}]}],"bundled":30},{"source":"osv","ecosystem":"Root:Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.190-1.aikido.167"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.190-1.aikido.167"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-203.213.aikido.119"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"rootio-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-203.213.aikido.119"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1.21.36"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1.21.34"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-52.1"}]}],"bundled":588},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.26"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.26"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.26"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7-RT_Update_20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.1.3.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.75.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.75.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.75.1"}]}],"bundled":662},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1.150700.17.45.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7_Update_21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.15.3.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.81.1"}]}],"bundled":661},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP5","package":"kgraft-patch-SLE12-SP5_Update_88","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-8.3.3"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-aws-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1018.18~18.04.1","5.4.0-1020.20~18.04.2","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.30~18.04.1","5.4.0-1030.31~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1038.40~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1045.47~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1058.61~18.04.3","5.4.0-1059.62~18.04.1","5.4.0-1060.63~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1081.88~18.04.1","5.4.0-1083.90~18.04.1","5.4.0-1084.91~18.04.1","5.4.0-1085.92~18.04.1","5.4.0-1086.93~18.04.1","5.4.0-1088.96~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1090.98~18.04.1","5.4.0-1092.100~18.04.2","5.4.0-1093.102~18.04.2","5.4.0-1094.102~18.04.1","5.4.0-1096.104~18.04.1","5.4.0-1097.105~18.04.1","5.4.0-1099.107~18.04.1","5.4.0-1100.108~18.04.1","5.4.0-1101.109~18.04.1","5.4.0-1103.111~18.04.1","5.4.0-1104.112~18.04.1","5.4.0-1105.113~18.04.1","5.4.0-1106.114~18.04.1","5.4.0-1107.115~18.04.1","5.4.0-1108.116~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.2","5.4.0-1113.123~18.04.1","5.4.0-1114.124~18.04.1","5.4.0-1116.126~18.04.1","5.4.0-1117.127~18.04.1","5.4.0-1118.128~18.04.1","5.4.0-1119.129~18.04.1","5.4.0-1120.130~18.04.1","5.4.0-1121.131~18.04.1","5.4.0-1122.132~18.04.1","5.4.0-1123.133~18.04.1","5.4.0-1124.134~18.04.1","5.4.0-1125.135~18.04.1","5.4.0-1126.136~18.04.1","5.4.0-1127.137~18.04.2","5.4.0-1128.138~18.04.1","5.4.0-1129.139~18.04.1","5.4.0-1130.140~18.04.1","5.4.0-1131.141~18.04.1","5.4.0-1132.142~18.04.1","5.4.0-1133.143~18.04.1","5.4.0-1134.144~18.04.1","5.4.0-1135.145~18.04.1","5.4.0-1136.146~18.04.1","5.4.0-1137.147~18.04.1","5.4.0-1139.149~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1147.157~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1153.163~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1156.166~18.04.1","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1160.170~18.04.1","5.4.0-1161.172~18.04.1","5.4.0-1162.173~18.04.1","5.4.0-1163.174~18.04.1","5.4.0-1165.176~18.04.1","5.4.0-1167.178~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-azure-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.20~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1023.23~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1026.26~18.04.1","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.36~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1055.57~18.04.1","5.4.0-1056.58~18.04.1","5.4.0-1058.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1069.72~18.04.1","5.4.0-1070.73~18.04.1","5.4.0-1072.75~18.04.1","5.4.0-1073.76~18.04.1","5.4.0-1074.77~18.04.1","5.4.0-1077.80~18.04.1","5.4.0-1078.81~18.04.1","5.4.0-1080.83~18.04.2","5.4.0-1083.87~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1089.94~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1091.96~18.04.1","5.4.0-1094.100~18.04.1","5.4.0-1095.101~18.04.1","5.4.0-1098.104~18.04.2","5.4.0-1100.106~18.04.1","5.4.0-1101.107~18.04.1","5.4.0-1103.109~18.04.1","5.4.0-1104.110~18.04.1","5.4.0-1105.111~18.04.1","5.4.0-1106.112~18.04.1","5.4.0-1107.113~18.04.1","5.4.0-1108.114~18.04.1","5.4.0-1109.115~18.04.1","5.4.0-1110.116~18.04.1","5.4.0-1111.117~18.04.1","5.4.0-1112.118~18.04.1","5.4.0-1113.119~18.04.1","5.4.0-1115.122~18.04.1","5.4.0-1116.123~18.04.1","5.4.0-1117.124~18.04.1","5.4.0-1118.125~18.04.1","5.4.0-1119.126~18.04.2","5.4.0-1120.127~18.04.1","5.4.0-1121.128~18.04.1","5.4.0-1122.129~18.04.1","5.4.0-1123.130~18.04.1","5.4.0-1124.131~18.04.1","5.4.0-1126.133~18.04.1","5.4.0-1127.134~18.04.1","5.4.0-1128.135~18.04.1","5.4.0-1129.136~18.04.1","5.4.0-1130.137~18.04.1","5.4.0-1131.138~18.04.1","5.4.0-1132.139~18.04.1","5.4.0-1133.140~18.04.1","5.4.0-1134.141~18.04.1","5.4.0-1135.142~18.04.1","5.4.0-1136.143~18.04.1","5.4.0-1137.144~18.04.1","5.4.0-1138.145~18.04.1","5.4.0-1139.146~18.04.1","5.4.0-1140.147~18.04.1","5.4.0-1142.149~18.04.1","5.4.0-1143.150~18.04.1","5.4.0-1145.152~18.04.1","5.4.0-1147.154~18.04.1","5.4.0-1148.155~18.04.1","5.4.0-1149.156~18.04.1","5.4.0-1150.157~18.04.1","5.4.0-1151.158~18.04.1","5.4.0-1152.159~18.04.1","5.4.0-1153.160~18.04.1","5.4.0-1154.161~18.04.1","5.4.0-1156.163~18.04.1","5.4.0-1157.164~18.04.1","5.4.0-1161.167~18.04.1","5.4.0-1162.168~18.04.1","5.4.0-1163.169~18.04.1","5.4.0-1164.170~18.04.1","5.4.0-1166.172~18.04.1","5.4.0-1167.173~18.04.1","5.4.0-1168.174~18.04.1","5.4.0-1169.175~18.04.1","5.4.0-1170.176~18.04.1","5.4.0-1171.177~18.04.1","5.4.0-1172.178~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-gcp-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.2","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1040.43~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.2","5.4.0-1046.49~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1051.55~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1060.64~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1065.69~18.04.1","5.4.0-1067.71~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.94~18.04.1","5.4.0-1087.95~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1096.105~18.04.2","5.4.0-1097.106~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.2","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.1","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1128.137~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1139.148~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.150~18.04.1","5.4.0-1142.151~18.04.1","5.4.0-1143.152~18.04.1","5.4.0-1145.154~18.04.1","5.4.0-1147.156~18.04.1","5.4.0-1148.157~18.04.1","5.4.0-1149.158~18.04.1","5.4.0-1150.159~18.04.1","5.4.0-1151.160~18.04.1","5.4.0-1152.161~18.04.1","5.4.0-1153.162~18.04.1","5.4.0-1154.163~18.04.1","5.4.0-1155.164~18.04.1","5.4.0-1156.165~18.04.1","5.4.0-1157.166~18.04.1","5.4.0-1159.168~18.04.1","5.4.0-1160.169~18.04.1","5.4.0-1161.170~18.04.1","5.4.0-1162.171~18.04.1","5.4.0-1163.172~18.04.1","5.4.0-1164.173~18.04.1","5.4.0-1165.174~18.04.1","5.4.0-1166.175~18.04.1","5.4.0-1167.176~18.04.1","5.4.0-1168.178~18.04.1","5.4.0-1169.179~18.04.1","5.4.0-1170.180~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-hwe-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-37.41~18.04.1","5.4.0-39.43~18.04.1","5.4.0-40.44~18.04.1","5.4.0-42.46~18.04.1","5.4.0-45.49~18.04.2","5.4.0-47.51~18.04.1","5.4.0-48.52~18.04.1","5.4.0-51.56~18.04.1","5.4.0-52.57~18.04.1","5.4.0-53.59~18.04.1","5.4.0-54.60~18.04.1","5.4.0-56.62~18.04.1","5.4.0-58.64~18.04.1","5.4.0-59.65~18.04.1","5.4.0-60.67~18.04.1","5.4.0-62.70~18.04.1","5.4.0-64.72~18.04.1","5.4.0-65.73~18.04.1","5.4.0-66.74~18.04.2","5.4.0-67.75~18.04.1","5.4.0-70.78~18.04.1","5.4.0-71.79~18.04.1","5.4.0-72.80~18.04.1","5.4.0-73.82~18.04.1","5.4.0-74.83~18.04.1","5.4.0-77.86~18.04.1","5.4.0-80.90~18.04.1","5.4.0-81.91~18.04.1","5.4.0-84.94~18.04.1","5.4.0-86.97~18.04.1","5.4.0-87.98~18.04.1","5.4.0-89.100~18.04.1","5.4.0-90.101~18.04.1","5.4.0-91.102~18.04.1","5.4.0-92.103~18.04.2","5.4.0-94.106~18.04.1","5.4.0-96.109~18.04.1","5.4.0-97.110~18.04.1","5.4.0-99.112~18.04.1","5.4.0-100.113~18.04.1","5.4.0-104.118~18.04.1","5.4.0-105.119~18.04.1","5.4.0-107.121~18.04.1","5.4.0-109.123~18.04.1","5.4.0-110.124~18.04.1","5.4.0-113.127~18.04.1","5.4.0-117.132~18.04.1","5.4.0-120.136~18.04.1","5.4.0-121.137~18.04.1","5.4.0-122.138~18.04.1","5.4.0-124.140~18.04.1","5.4.0-125.141~18.04.1","5.4.0-126.142~18.04.1","5.4.0-128.144~18.04.1","5.4.0-131.147~18.04.1","5.4.0-132.148~18.04.1","5.4.0-133.149~18.04.1","5.4.0-135.152~18.04.2","5.4.0-136.153~18.04.1","5.4.0-137.154~18.04.1","5.4.0-139.156~18.04.1","5.4.0-144.161~18.04.1","5.4.0-146.163~18.04.1","5.4.0-147.164~18.04.1","5.4.0-148.165~18.04.1","5.4.0-149.166~18.04.1","5.4.0-150.167~18.04.1","5.4.0-152.169~18.04.1","5.4.0-153.170~18.04.1","5.4.0-155.172~18.04.1","5.4.0-156.173~18.04.1","5.4.0-159.176~18.04.1","5.4.0-162.179~18.04.1","5.4.0-163.180~18.04.1","5.4.0-164.181~18.04.1","5.4.0-165.182~18.04.1","5.4.0-166.183~18.04.2","5.4.0-167.184~18.04.1","5.4.0-169.187~18.04.1","5.4.0-170.188~18.04.1","5.4.0-171.189~18.04.1","5.4.0-172.190~18.04.1","5.4.0-173.191~18.04.1","5.4.0-174.193~18.04.1","5.4.0-175.195~18.04.1","5.4.0-177.197~18.04.1","5.4.0-181.201~18.04.1","5.4.0-182.202~18.04.1","5.4.0-186.206~18.04.1","5.4.0-187.207~18.04.1","5.4.0-189.209~18.04.1","5.4.0-190.210~18.04.1","5.4.0-192.212~18.04.1","5.4.0-193.213~18.04.1","5.4.0-195.215~18.04.1","5.4.0-196.216~18.04.1","5.4.0-198.218~18.04.1","5.4.0-200.220~18.04.1","5.4.0-202.222~18.04.1","5.4.0-204.224~18.04.1","5.4.0-205.225~18.04.1","5.4.0-208.228~18.04.1","5.4.0-211.231~18.04.1","5.4.0-212.232~18.04.1","5.4.0-214.234~18.04.1","5.4.0-215.235~18.04.1","5.4.0-216.236~18.04.1","5.4.0-218.238~18.04.1","5.4.0-219.239~18.04.1","5.4.0-220.240~18.04.1","5.4.0-221.241~18.04.1","5.4.0-222.242~18.04.1","5.4.0-223.243~18.04.1","5.4.0-224.244~18.04.1","5.4.0-225.245~18.04.1","5.4.0-227.247~18.04.1","5.4.0-228.248~18.04.1","5.4.0-229.249~18.04.1","5.4.0-231.251~18.04.1","5.4.0-233.253~18.04.1","5.4.0-234.254~18.04.1","5.4.0-238.258~18.04.1","5.4.0-241.261~18.04.1","5.4.0-242.262~18.04.1","5.4.0-244.264~18.04.1","5.4.0-245.265~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-ibm-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1010.11~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1017.19~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1020.22~18.04.1","5.4.0-1021.23~18.04.1","5.4.0-1023.25~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.32~18.04.1","5.4.0-1029.33~18.04.1","5.4.0-1031.35~18.04.1","5.4.0-1032.36~18.04.1","5.4.0-1033.37~18.04.1","5.4.0-1034.38~18.04.1","5.4.0-1036.41~18.04.1","5.4.0-1037.42~18.04.1","5.4.0-1040.45~18.04.2","5.4.0-1041.46~18.04.1","5.4.0-1042.47~18.04.1","5.4.0-1044.49~18.04.1","5.4.0-1045.50~18.04.1","5.4.0-1046.51~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1049.54~18.04.1","5.4.0-1050.55~18.04.1","5.4.0-1051.56~18.04.1","5.4.0-1052.57~18.04.1","5.4.0-1053.58~18.04.1","5.4.0-1054.59~18.04.1","5.4.0-1056.61~18.04.1","5.4.0-1057.62~18.04.1","5.4.0-1058.63~18.04.1","5.4.0-1059.64~18.04.1","5.4.0-1060.65~18.04.1","5.4.0-1061.66~18.04.1","5.4.0-1063.68~18.04.1","5.4.0-1064.69~18.04.1","5.4.0-1065.70~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1068.73~18.04.1","5.4.0-1069.74~18.04.1","5.4.0-1070.75~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1076.81~18.04.1","5.4.0-1077.82~18.04.1","5.4.0-1078.83~18.04.1","5.4.0-1079.84~18.04.1","5.4.0-1080.85~18.04.1","5.4.0-1081.86~18.04.1","5.4.0-1082.87~18.04.1","5.4.0-1083.88~18.04.1","5.4.0-1084.89~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1092.97~18.04.1","5.4.0-1093.98~18.04.1","5.4.0-1094.99~18.04.1","5.4.0-1095.100~18.04.1","5.4.0-1096.101~18.04.1","5.4.0-1097.102~18.04.1","5.4.0-1098.103~18.04.1","5.4.0-1099.104~18.04.1","5.4.0-1100.105~18.04.1","5.4.0-1102.107~18.04.1","5.4.0-1103.108~18.04.1","5.4.0-1104.109~18.04.1","5.4.0-1105.110~18.04.1","5.4.0-1107.112~18.04.1","5.4.0-1108.113~18.04.1","5.4.0-1109.114~18.04.1","5.4.0-1111.116~18.04.1","5.4.0-1112.117~18.04.1","5.4.0-1113.118~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-oracle-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.1","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1033.35","5.4.0-1034.36~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1039.42~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.1","5.4.0-1046.50~18.04.2","5.4.0-1048.52~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1054.58~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1061.65~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1069.75~18.04.1","5.4.0-1070.76~18.04.1","5.4.0-1071.77~18.04.1","5.4.0-1073.79~18.04.1","5.4.0-1076.83~18.04.1","5.4.0-1078.86~18.04.1","5.4.0-1079.87~18.04.1","5.4.0-1081.89~18.04.1","5.4.0-1082.90~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.95~18.04.1","5.4.0-1087.96~18.04.1","5.4.0-1090.99~18.04.2","5.4.0-1091.100~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1094.103~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1099.108~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.1","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.4","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1119.128~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1131.140~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.151~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1143.153~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1155.165~18.04.1","5.4.0-1156.166~18.04.2","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1159.169~18.04.1","5.4.0-1161.171~18.04.1","5.4.0-1162.172~18.04.1","5.4.0-1163.173~18.04.1","5.4.0-1164.174~18.04.1","5.4.0-1165.175~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-raspi-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1013.13~18.04.1","5.4.0-1015.15~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1021.24~18.04.1","5.4.0-1022.25~18.04.1","5.4.0-1023.26~18.04.1","5.4.0-1025.28~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.31~18.04.1","5.4.0-1029.32~18.04.1","5.4.0-1030.33~18.04.1","5.4.0-1032.35~18.04.1","5.4.0-1033.36~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1041.45~18.04.1","5.4.0-1042.46~18.04.3","5.4.0-1043.47~18.04.1","5.4.0-1044.48~18.04.1","5.4.0-1045.49~18.04.1","5.4.0-1046.50~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1050.56~18.04.1","5.4.0-1052.58~18.04.1","5.4.0-1053.60~18.04.1","5.4.0-1055.62~18.04.1","5.4.0-1056.63~18.04.1","5.4.0-1058.65~18.04.1","5.4.0-1059.66~18.04.1","5.4.0-1060.68~18.04.1","5.4.0-1062.70~18.04.1","5.4.0-1065.75~18.04.1","5.4.0-1066.76~18.04.1","5.4.0-1068.78~18.04.1","5.4.0-1069.79~18.04.1","5.4.0-1070.80~18.04.1","5.4.0-1071.81~18.04.1","5.4.0-1073.84~18.04.1","5.4.0-1074.85~18.04.1","5.4.0-1077.88~18.04.2","5.4.0-1078.89~18.04.1","5.4.0-1079.90~18.04.1","5.4.0-1080.91~18.04.1","5.4.0-1081.92~18.04.1","5.4.0-1082.93~18.04.1","5.4.0-1083.94~18.04.1","5.4.0-1084.95~18.04.1","5.4.0-1085.96~18.04.1","5.4.0-1086.97~18.04.1","5.4.0-1088.99~18.04.1","5.4.0-1089.100~18.04.1","5.4.0-1090.101~18.04.1","5.4.0-1091.102~18.04.1","5.4.0-1092.103~18.04.1","5.4.0-1093.104~18.04.1","5.4.0-1094.105~18.04.1","5.4.0-1095.106~18.04.1","5.4.0-1096.107~18.04.1","5.4.0-1097.109~18.04.2","5.4.0-1098.110~18.04.2","5.4.0-1100.112~18.04.1","5.4.0-1101.113~18.04.1","5.4.0-1102.114~18.04.1","5.4.0-1103.115~18.04.1","5.4.0-1104.116~18.04.1","5.4.0-1105.117~18.04.1","5.4.0-1106.118~18.04.1","5.4.0-1107.119~18.04.1","5.4.0-1108.120~18.04.1","5.4.0-1109.121~18.04.1","5.4.0-1110.122~18.04.1","5.4.0-1111.123~18.04.1","5.4.0-1112.124~18.04.1","5.4.0-1114.126~18.04.1","5.4.0-1115.127~18.04.1","5.4.0-1116.128~18.04.1","5.4.0-1117.129~18.04.1","5.4.0-1118.130~18.04.1","5.4.0-1119.131~18.04.1","5.4.0-1120.132~18.04.1","5.4.0-1121.133~18.04.1","5.4.0-1122.134~18.04.1","5.4.0-1129.142~18.04.1","5.4.0-1130.143~18.04.1","5.4.0-1131.144~18.04.1","5.4.0-1132.145~18.04.1","5.4.0-1133.146~18.04.1","5.4.0-1134.147~18.04.1","5.4.0-1135.148~18.04.1","5.4.0-1136.149~18.04.1","5.4.0-1137.150~18.04.1","5.4.0-1139.152~18.04.1","5.4.0-1140.153~18.04.1","5.4.0-1143.156~18.04.1","5.4.0-1144.157~18.04.1","5.4.0-1145.158~18.04.1","5.4.0-1146.159~18.04.1","5.4.0-1147.160~18.04.1","5.4.0-1148.161~18.04.1","5.4.0-1149.162~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-18.19","5.3.0-24.26","5.4.0-9.12","5.4.0-18.22","5.4.0-21.25","5.4.0-24.28","5.4.0-25.29","5.4.0-26.30","5.4.0-28.32","5.4.0-29.33","5.4.0-31.35","5.4.0-33.37","5.4.0-37.41","5.4.0-39.43","5.4.0-40.44","5.4.0-42.46","5.4.0-45.49","5.4.0-47.51","5.4.0-48.52","5.4.0-51.56","5.4.0-52.57","5.4.0-53.59","5.4.0-54.60","5.4.0-56.62","5.4.0-58.64","5.4.0-59.65","5.4.0-60.67","5.4.0-62.70","5.4.0-64.72","5.4.0-65.73","5.4.0-66.74","5.4.0-67.75","5.4.0-70.78","5.4.0-71.79","5.4.0-72.80","5.4.0-73.82","5.4.0-74.83","5.4.0-77.86","5.4.0-80.90","5.4.0-81.91","5.4.0-84.94","5.4.0-86.97","5.4.0-88.99","5.4.0-89.100","5.4.0-90.101","5.4.0-91.102","5.4.0-92.103","5.4.0-94.106","5.4.0-96.109","5.4.0-97.110","5.4.0-99.112","5.4.0-100.113","5.4.0-104.118","5.4.0-105.119","5.4.0-107.121","5.4.0-109.123","5.4.0-110.124","5.4.0-113.127","5.4.0-117.132","5.4.0-120.136","5.4.0-121.137","5.4.0-122.138","5.4.0-124.140","5.4.0-125.141","5.4.0-126.142","5.4.0-128.144","5.4.0-131.147","5.4.0-132.148","5.4.0-135.152","5.4.0-136.153","5.4.0-137.154","5.4.0-139.156","5.4.0-144.161","5.4.0-146.163","5.4.0-147.164","5.4.0-148.165","5.4.0-149.166","5.4.0-150.167","5.4.0-152.169","5.4.0-153.170","5.4.0-155.172","5.4.0-156.173","5.4.0-159.176","5.4.0-162.179","5.4.0-163.180","5.4.0-164.181","5.4.0-165.182","5.4.0-166.183","5.4.0-167.184","5.4.0-169.187","5.4.0-170.188","5.4.0-171.189","5.4.0-172.190","5.4.0-173.191","5.4.0-174.193","5.4.0-176.196","5.4.0-177.197","5.4.0-181.201","5.4.0-182.202","5.4.0-186.206","5.4.0-187.207","5.4.0-189.209","5.4.0-190.210","5.4.0-192.212","5.4.0-193.213","5.4.0-195.215","5.4.0-196.216","5.4.0-198.218","5.4.0-200.220","5.4.0-202.222","5.4.0-204.224","5.4.0-205.225","5.4.0-208.228","5.4.0-211.231","5.4.0-212.232","5.4.0-214.234","5.4.0-215.235","5.4.0-216.236","5.4.0-218.238","5.4.0-219.239","5.4.0-220.240","5.4.0-221.241","5.4.0-222.242","5.4.0-223.243","5.4.0-224.244","5.4.0-225.245","5.4.0-227.247","5.4.0-228.248","5.4.0-229.249","5.4.0-230.250","5.4.0-231.251","5.4.0-233.253","5.4.0-234.254","5.4.0-238.258","5.4.0-241.261","5.4.0-242.262","5.4.0-244.264","5.4.0-245.265"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.3.0-1010.11","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1017.17","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.37","5.4.0-1037.39","5.4.0-1038.40","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1045.47","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1088.96","5.4.0-1089.97","5.4.0-1092.100","5.4.0-1093.101","5.4.0-1094.102","5.4.0-1096.104","5.4.0-1097.105","5.4.0-1099.107","5.4.0-1100.108","5.4.0-1101.109","5.4.0-1102.110","5.4.0-1103.111","5.4.0-1104.112","5.4.0-1105.113","5.4.0-1106.114","5.4.0-1107.115","5.4.0-1108.116","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.123","5.4.0-1114.124","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1129.139","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1142.152","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1148.158","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1153.163","5.4.0-1154.164","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.172","5.4.0-1162.173","5.4.0-1163.174","5.4.0-1164.175","5.4.0-1165.176","5.4.0-1166.177","5.4.0-1167.178"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1","5.15.0-1040.45~20.04.1","5.15.0-1041.46~20.04.1","5.15.0-1043.48~20.04.1","5.15.0-1044.49~20.04.1","5.15.0-1045.50~20.04.1","5.15.0-1047.52~20.04.1","5.15.0-1048.53~20.04.1","5.15.0-1049.54~20.04.1","5.15.0-1050.55~20.04.1","5.15.0-1051.56~20.04.1","5.15.0-1052.57~20.04.1","5.15.0-1053.58~20.04.1","5.15.0-1055.60~20.04.1","5.15.0-1056.61~20.04.1","5.15.0-1057.63~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1075.82~20.04.1","5.15.0-1077.84~20.04.1","5.15.0-1080.87~20.04.1","5.15.0-1081.88~20.04.1","5.15.0-1082.89~20.04.1","5.15.0-1083.90~20.04.1","5.15.0-1084.91~20.04.1","5.15.0-1086.93~20.04.1","5.15.0-1087.94~20.04.1","5.15.0-1088.95~20.04.1","5.15.0-1089.96~20.04.1","5.15.0-1090.97~20.04.1","5.15.0-1091.98~20.04.1","5.15.0-1092.99~20.04.1","5.15.0-1093.100~20.04.1","5.15.0-1095.102~20.04.1","5.15.0-1096.103~20.04.1","5.15.0-1097.104~20.04.1","5.15.0-1098.105~20.04.1","5.15.0-1099.106~20.04.1","5.15.0-1100.107~20.04.2","5.15.0-1101.108~20.04.1","5.15.0-1103.110~20.04.1","5.15.0-1104.111~20.04.1","5.15.0-1105.112~20.04.1","5.15.0-1106.113~20.04.1","5.15.0-1108.115~20.04.1","5.15.0-1109.116~20.04.1","5.15.0-1111.118~20.04.1","5.15.0-1112.119~20.04.1","5.15.0-1114.121~20.04.1","5.15.0-1115.122~20.04.1","5.15.0-1116.123~20.04.1","5.15.0-1117.124~20.04.1","5.15.0-1119.126~20.04.1","5.15.0-1120.127~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1006.6","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1010.10","5.4.0-1012.12","5.4.0-1016.16","5.4.0-1019.19","5.4.0-1020.20","5.4.0-1022.22","5.4.0-1023.23","5.4.0-1025.25","5.4.0-1026.26","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.38","5.4.0-1039.41","5.4.0-1040.42","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1072.75","5.4.0-1073.76","5.4.0-1074.77","5.4.0-1077.80","5.4.0-1078.81","5.4.0-1080.83","5.4.0-1083.87","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1098.104","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1103.109","5.4.0-1104.110","5.4.0-1105.111","5.4.0-1106.112","5.4.0-1107.113","5.4.0-1108.114","5.4.0-1109.115","5.4.0-1110.116","5.4.0-1111.117","5.4.0-1112.118","5.4.0-1113.119","5.4.0-1114.120","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1122.129","5.4.0-1123.130","5.4.0-1124.131","5.4.0-1126.133","5.4.0-1127.134","5.4.0-1128.135","5.4.0-1129.136","5.4.0-1130.137","5.4.0-1131.138","5.4.0-1132.139","5.4.0-1133.140","5.4.0-1134.141","5.4.0-1135.142","5.4.0-1136.143","5.4.0-1137.144","5.4.0-1138.145","5.4.0-1139.146","5.4.0-1140.147","5.4.0-1142.149","5.4.0-1143.150","5.4.0-1145.152","5.4.0-1147.154","5.4.0-1148.155","5.4.0-1149.156","5.4.0-1150.157","5.4.0-1151.158","5.4.0-1152.159","5.4.0-1153.160","5.4.0-1154.161","5.4.0-1156.163","5.4.0-1157.164","5.4.0-1160.166","5.4.0-1161.167","5.4.0-1162.168","5.4.0-1163.169","5.4.0-1164.170","5.4.0-1166.172","5.4.0-1167.173","5.4.0-1168.174","5.4.0-1169.175","5.4.0-1170.176","5.4.0-1171.177","5.4.0-1172.178"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1","5.15.0-1042.49~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1056.64~20.04.1","5.15.0-1057.65~20.04.1","5.15.0-1058.66~20.04.2","5.15.0-1059.67~20.04.1","5.15.0-1060.69~20.04.1","5.15.0-1061.70~20.04.1","5.15.0-1063.72~20.04.1","5.15.0-1064.73~20.04.1","5.15.0-1065.74~20.04.1","5.15.0-1067.76~20.04.1","5.15.0-1068.77~20.04.1","5.15.0-1070.79~20.04.1","5.15.0-1071.80~20.04.1","5.15.0-1072.81~20.04.1","5.15.0-1073.82~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1079.88~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1082.91~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.1","5.15.0-1088.97~20.04.1","5.15.0-1089.98~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1094.103~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1102.111~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1110.119~20.04.1","5.15.0-1111.120~20.04.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1123.132~20.04.1","5.15.0-1125.134~20.04.1","5.15.0-1126.135~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1","5.15.0-1125.134~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.10","5.4.0-1011.14","5.4.0-1012.15","5.4.0-1013.16","5.4.0-1016.19","5.4.0-1019.22","5.4.0-1020.23","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1040.44","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1049.55","5.4.0-1050.56","5.4.0-1054.60","5.4.0-1058.64","5.4.0-1059.65","5.4.0-1060.66","5.4.0-1062.68","5.4.0-1064.70","5.4.0-1065.71","5.4.0-1066.72","5.4.0-1068.74","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1072.78","5.4.0-1073.79","5.4.0-1074.80","5.4.0-1075.81","5.4.0-1076.82","5.4.0-1077.83","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1082.89","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1088.95","5.4.0-1089.96","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1092.99","5.4.0-1093.100","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1123.130","5.4.0-1125.132","5.4.0-1126.133"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1004.4","5.3.0-1009.10","5.3.0-1011.12","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1033.35","5.4.0-1034.37","5.4.0-1036.39","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1040.43","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1044.47","5.4.0-1046.49","5.4.0-1049.53","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1060.64","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.94","5.4.0-1087.95","5.4.0-1089.97","5.4.0-1090.98","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1096.105","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1128.137","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1142.151","5.4.0-1143.152","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163","5.4.0-1155.164","5.4.0-1156.165","5.4.0-1157.166","5.4.0-1159.168","5.4.0-1160.169","5.4.0-1161.170","5.4.0-1162.171","5.4.0-1163.172","5.4.0-1164.173","5.4.0-1165.174","5.4.0-1166.175","5.4.0-1167.177","5.4.0-1168.178","5.4.0-1169.179","5.4.0-1170.180"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1","5.15.0-1038.46~20.04.1","5.15.0-1039.47~20.04.1","5.15.0-1040.48~20.04.1","5.15.0-1041.49~20.04.1","5.15.0-1042.50~20.04.1","5.15.0-1044.52~20.04.1","5.15.0-1045.53~20.04.2","5.15.0-1046.54~20.04.1","5.15.0-1047.55~20.04.1","5.15.0-1048.56~20.04.1","5.15.0-1049.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1055.63~20.04.1","5.15.0-1058.66~20.04.1","5.15.0-1059.67~20.04.1","5.15.0-1060.68~20.04.1","5.15.0-1062.70~20.04.1","5.15.0-1065.73~20.04.1","5.15.0-1066.74~20.04.1","5.15.0-1067.75~20.04.1","5.15.0-1068.76~20.04.1","5.15.0-1069.77~20.04.1","5.15.0-1070.78~20.04.1","5.15.0-1071.79~20.04.1","5.15.0-1072.80~20.04.1","5.15.0-1073.81~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1077.86~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1083.92~20.04.1","5.15.0-1085.94~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.2","5.15.0-1088.97~20.04.1","5.15.0-1090.99~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1092.101~20.04.1","5.15.0-1093.102~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1099.108~20.04.1","5.15.0-1100.109~20.04.1","5.15.0-1101.110~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1104.113~20.04.1","5.15.0-1106.115~20.04.1","5.15.0-1108.117~20.04.1","5.15.0-1109.118~20.04.1","5.15.0-1111.121~20.04.1","5.15.0-1112.122~20.04.1","5.15.0-1114.124~20.04.1","5.15.0-1118.128~20.04.1","5.15.0-1120.130~20.04.1","5.15.0-1121.131~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.37~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1044.51~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1048.55~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.58~20.04.1","5.15.0-1052.59~20.04.1","5.15.0-1053.60~20.04.1","5.15.0-1054.61~20.04.1","5.15.0-1055.62~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.86~20.04.2","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.96~20.04.1","5.15.0-87.97~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-130.140~20.04.1","5.15.0-131.141~20.04.1","5.15.0-134.145~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-151.161~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.3","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-176.186~20.04.1","5.15.0-177.187~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-185.195~20.04.1","5.15.0-186.196~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1","5.15.0-198.208~20.04.1","5.15.0-202.212~20.04.1","5.15.0-203.213~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1003.4","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1006.7","5.4.0-1007.8","5.4.0-1008.9","5.4.0-1010.11","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1017.19","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1020.22","5.4.0-1021.23","5.4.0-1023.25","5.4.0-1026.29","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1036.41","5.4.0-1037.42","5.4.0-1040.45","5.4.0-1041.46","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1049.54","5.4.0-1050.55","5.4.0-1051.56","5.4.0-1052.57","5.4.0-1053.58","5.4.0-1054.59","5.4.0-1056.61","5.4.0-1057.62","5.4.0-1058.63","5.4.0-1059.64","5.4.0-1060.65","5.4.0-1061.66","5.4.0-1063.68","5.4.0-1064.69","5.4.0-1065.70","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1068.73","5.4.0-1069.74","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1077.82","5.4.0-1078.83","5.4.0-1079.84","5.4.0-1080.85","5.4.0-1081.86","5.4.0-1082.87","5.4.0-1083.88","5.4.0-1084.89","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1088.93","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1092.97","5.4.0-1093.98","5.4.0-1094.99","5.4.0-1095.100","5.4.0-1096.101","5.4.0-1097.102","5.4.0-1098.103","5.4.0-1099.104","5.4.0-1100.105","5.4.0-1102.107","5.4.0-1103.108","5.4.0-1104.109","5.4.0-1105.110","5.4.0-1107.112","5.4.0-1108.113","5.4.0-1109.114","5.4.0-1111.116","5.4.0-1112.117","5.4.0-1113.118"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1033.36~20.04.1","5.15.0-1034.37~20.04.1","5.15.0-1035.38~20.04.1","5.15.0-1036.39~20.04.1","5.15.0-1037.40~20.04.1","5.15.0-1038.41~20.04.1","5.15.0-1040.43~20.04.1","5.15.0-1041.44~20.04.1","5.15.0-1042.45~20.04.1","5.15.0-1043.46~20.04.1","5.15.0-1044.47~20.04.1","5.15.0-1045.48~20.04.1","5.15.0-1046.49~20.04.1","5.15.0-1047.50~20.04.1","5.15.0-1048.51~20.04.1","5.15.0-1049.52~20.04.1","5.15.0-1050.53~20.04.1","5.15.0-1053.56~20.04.1","5.15.0-1054.57~20.04.1","5.15.0-1055.58~20.04.1","5.15.0-1057.60~20.04.1","5.15.0-1058.61~20.04.1","5.15.0-1059.62~20.04.1","5.15.0-1060.63~20.04.1","5.15.0-1061.64~20.04.1","5.15.0-1062.65~20.04.1","5.15.0-1063.66~20.04.1","5.15.0-1064.67~20.04.1","5.15.0-1065.68~20.04.1","5.15.0-1066.69~20.04.1","5.15.0-1067.70~20.04.1","5.15.0-1068.71~20.04.1","5.15.0-1069.72~20.04.1","5.15.0-1074.77~20.04.1","5.15.0-1075.78~20.04.1","5.15.0-1076.79~20.04.1","5.15.0-1078.81~20.04.1","5.15.0-1079.82~20.04.1","5.15.0-1080.83~20.04.1","5.15.0-1081.84~20.04.1","5.15.0-1083.86~20.04.1","5.15.0-1085.88~20.04.1","5.15.0-1086.89~20.04.1","5.15.0-1087.90~20.04.1","5.15.0-1089.92~20.04.1","5.15.0-1090.93~20.04.1","5.15.0-1091.94~20.04.1","5.15.0-1092.95~20.04.1","5.15.0-1093.96~20.04.1","5.15.0-1094.97~20.04.1","5.15.0-1095.98~20.04.1","5.15.0-1097.100~20.04.1","5.15.0-1098.101~20.04.1","5.15.0-1099.102~20.04.1","5.15.0-1100.103~20.04.1","5.15.0-1102.105~20.04.1","5.15.0-1103.106~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1","5.15.0-1111.115~20.04.1","5.15.0-1113.117~20.04.1","5.15.0-1114.118~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.49~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1060.66~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.2","5.15.0-1074.80~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.1","5.15.0-1086.92~20.04.1","5.15.0-1087.93~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1099.105~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1103.109~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1107.113~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1","5.15.0-1112.118~20.04.1","5.15.0-1114.120~20.04.1","5.15.0-1115.121~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-iot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.3","5.4.0-1004.6","5.4.0-1005.7","5.4.0-1006.8","5.4.0-1009.11","5.4.0-1010.12","5.4.0-1011.13","5.4.0-1012.14","5.4.0-1013.15","5.4.0-1014.16","5.4.0-1017.18","5.4.0-1018.19","5.4.0-1019.20","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1042.43","5.4.0-1043.44","5.4.0-1044.45","5.4.0-1045.46","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1071.74"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1004.4","5.4.0-1006.6","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1023.23","5.4.0-1024.24","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1044.46","5.4.0-1045.47","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1050.52","5.4.0-1051.53","5.4.0-1053.55","5.4.0-1054.56","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1068.72","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1082.88","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.92","5.4.0-1087.93","5.4.0-1088.94","5.4.0-1089.95","5.4.0-1090.96","5.4.0-1091.97","5.4.0-1092.98","5.4.0-1093.99","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1096.102","5.4.0-1097.103","5.4.0-1098.104","5.4.0-1099.105","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1102.108","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1113.120","5.4.0-1114.121","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.127","5.4.0-1120.128","5.4.0-1121.129","5.4.0-1122.130","5.4.0-1123.131","5.4.0-1124.132","5.4.0-1125.133","5.4.0-1126.134","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1143.152","5.4.0-1144.153","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.88~20.04.1","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.95~20.04.1","5.15.0-87.96~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-110.120~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-128.138~20.04.1","5.15.0-129.139~20.04.1","5.15.0-131.141~20.04.1","5.15.0-133.143~20.04.1","5.15.0-134.145~20.04.1","5.15.0-135.146~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-140.150~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.1","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-174.184~20.04.1","5.15.0-175.185~20.04.1","5.15.0-177.187~20.04.1","5.15.0-178.188~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-183.193~20.04.1","5.15.0-184.194~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1","5.15.0-195.205~20.04.1","5.15.0-197.207~20.04.1","5.15.0-198.208~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-nvidia-tegra-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1009.9~20.04.1","5.15.0-1010.10~20.04.1","5.15.0-1012.12~20.04.1","5.15.0-1014.14~20.04.1","5.15.0-1015.15~20.04.1","5.15.0-1016.16~20.04.1","5.15.0-1017.17~20.04.1","5.15.0-1018.18~20.04.1","5.15.0-1019.19~20.04.1","5.15.0-1020.20~20.04.1","5.15.0-1022.22~20.04.1","5.15.0-1025.25~20.04.1","5.15.0-1027.27~20.04.1","5.15.0-1030.30~20.04.1","5.15.0-1032.32~20.04.1","5.15.0-1039.39~20.04.1","5.15.0-1040.40~20.04.1","5.15.0-1041.41~20.04.1","5.15.0-1042.42~20.04.1","5.15.0-1043.43~20.04.1","5.15.0-1044.44~20.04.1","5.15.0-1045.45~20.04.1","5.15.0-1046.46~20.04.1","5.15.0-1047.47~20.04.1","5.15.0-1048.48~20.04.1","5.15.0-1049.49~20.04.1","5.15.0-1050.50~20.04.1","5.15.0-1051.51~20.04.1","5.15.0-1052.52~20.04.2","5.15.0-1053.53~20.04.1","5.15.0-1055.55~20.04.1","5.15.0-1057.57~20.04.1","5.15.0-1058.58~20.04.1","5.15.0-1060.60~20.04.1","5.15.0-1061.61~20.04.1","5.15.0-1063.63~20.04.1","5.15.0-1064.66~20.04.1","5.15.0-1065.67~20.04.1","5.15.0-1066.68~20.04.1","5.15.0-1067.69~20.04.1","5.15.0-1068.70~20.04.1","5.15.0-1070.72~20.04.1","5.15.0-1071.73~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1002.2","5.3.0-1007.8","5.3.0-1008.9","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1034.36","5.4.0-1035.38","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1039.42","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1069.75","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1073.79","5.4.0-1076.83","5.4.0-1078.86","5.4.0-1079.87","5.4.0-1081.89","5.4.0-1082.90","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1090.99","5.4.0-1091.100","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1094.103","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1099.108","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1119.128","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1140.150","5.4.0-1141.151","5.4.0-1142.152","5.4.0-1143.153","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1154.164","5.4.0-1155.165","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.171","5.4.0-1162.172","5.4.0-1163.173","5.4.0-1164.174","5.4.0-1165.175"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1041.47~20.04.1","5.15.0-1042.48~20.04.1","5.15.0-1044.50~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1047.53~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1053.59~20.04.1","5.15.0-1054.60~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1074.80~20.04.1","5.15.0-1075.81~20.04.1","5.15.0-1076.82~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1080.86~20.04.1","5.15.0-1081.87~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.3","5.15.0-1086.92~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1097.103~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1102.108~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1","5.15.0-1114.120~20.04.1","5.15.0-1116.122~20.04.1","5.15.0-1117.123~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.7","5.4.0-1008.8","5.4.0-1011.11","5.4.0-1012.12","5.4.0-1013.13","5.4.0-1015.15","5.4.0-1016.17","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1029.32","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1033.36","5.4.0-1034.37","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1038.41","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1050.56","5.4.0-1052.58","5.4.0-1053.60","5.4.0-1055.62","5.4.0-1056.63","5.4.0-1058.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1062.70","5.4.0-1065.75","5.4.0-1066.76","5.4.0-1068.78","5.4.0-1069.79","5.4.0-1070.80","5.4.0-1071.81","5.4.0-1073.84","5.4.0-1074.85","5.4.0-1077.88","5.4.0-1078.89","5.4.0-1079.90","5.4.0-1080.91","5.4.0-1081.92","5.4.0-1082.93","5.4.0-1083.94","5.4.0-1084.95","5.4.0-1085.96","5.4.0-1086.97","5.4.0-1088.99","5.4.0-1089.100","5.4.0-1090.101","5.4.0-1091.102","5.4.0-1092.103","5.4.0-1093.104","5.4.0-1094.105","5.4.0-1095.106","5.4.0-1096.107","5.4.0-1097.109","5.4.0-1098.110","5.4.0-1100.112","5.4.0-1101.113","5.4.0-1102.114","5.4.0-1103.115","5.4.0-1104.116","5.4.0-1105.117","5.4.0-1106.118","5.4.0-1107.119","5.4.0-1108.120","5.4.0-1109.121","5.4.0-1110.122","5.4.0-1111.123","5.4.0-1112.124","5.4.0-1113.125","5.4.0-1114.126","5.4.0-1115.127","5.4.0-1116.128","5.4.0-1117.129","5.4.0-1118.130","5.4.0-1119.131","5.4.0-1120.132","5.4.0-1121.133","5.4.0-1122.134","5.4.0-1129.142","5.4.0-1130.143","5.4.0-1131.144","5.4.0-1132.145","5.4.0-1133.146","5.4.0-1134.147","5.4.0-1135.148","5.4.0-1136.149","5.4.0-1137.150","5.4.0-1139.152","5.4.0-1140.153","5.4.0-1143.156","5.4.0-1144.157","5.4.0-1145.158","5.4.0-1146.159","5.4.0-1147.160","5.4.0-1148.161","5.4.0-1149.162"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-riscv-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1015.17~20.04.1","5.15.0-1017.19~20.04.1","5.15.0-1018.21~20.04.1","5.15.0-1019.22~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1029.33~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1032.36~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.2","5.15.0-1037.41~20.04.2","5.15.0-1038.42~20.04.2","5.15.0-1039.43~20.04.2","5.15.0-1040.44~20.04.3","5.15.0-1041.45~20.04.1","5.15.0-1043.47~20.04.1","5.15.0-1044.48~20.04.1","5.15.0-1045.49~20.04.1","5.15.0-1046.50~20.04.1","5.15.0-1047.51~20.04.1","5.15.0-1048.52~20.04.1","5.15.0-1049.53~20.04.2","5.15.0-1050.54~20.04.1","5.15.0-1051.55~20.04.1","5.15.0-1052.56~20.04.1","5.15.0-1053.57~20.04.1","5.15.0-1056.60~20.04.1","5.15.0-1057.61~20.04.1","5.15.0-1058.62~20.04.1","5.15.0-1059.63~20.04.1","5.15.0-1060.64~20.04.1","5.15.0-1061.65~20.04.1","5.15.0-1062.66~20.04.1","5.15.0-1063.67~20.04.1","5.15.0-1064.68~20.04.1","5.15.0-1065.69~20.04.1","5.15.0-1066.70~20.04.1","5.15.0-1067.71~20.04.1","5.15.0-1068.72~20.04.1","5.15.0-1069.73~20.04.1","5.15.0-1070.74~20.04.1","5.15.0-1071.75~20.04.1","5.15.0-1072.76~20.04.1","5.15.0-1073.77~20.04.1","5.15.0-1074.78~20.04.1","5.15.0-1075.79~20.04.1","5.15.0-1076.80~20.04.1","5.15.0-1077.81~20.04.1","5.15.0-1078.82~20.04.1","5.15.0-1079.83~20.04.1","5.15.0-1081.85~20.04.1","5.15.0-1082.86~20.04.1","5.15.0-1083.87~20.04.1","5.15.0-1084.88~20.04.1","5.15.0-1085.89~20.04.1","5.15.0-1086.90~20.04.1","5.15.0-1087.91~20.04.1","5.15.0-1088.92~20.04.1","5.15.0-1090.94~20.04.1","5.15.0-1091.95~20.04.1","5.15.0-1092.96~20.04.1","5.15.0-1093.97~20.04.2","5.15.0-1094.98~20.04.1","5.15.0-1095.99~20.04.1","5.15.0-1096.100~20.04.1","5.15.0-1097.101~20.04.1","5.15.0-1098.102~20.04.1","5.15.0-1099.103~20.04.1","5.15.0-1100.104~20.04.1","5.15.0-1102.106~20.04.1","5.15.0-1103.107~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1","5.15.0-1111.115~20.04.1","5.15.0-1113.117~20.04.2","5.15.0-1114.118~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.24","5.4.0-1021.25","5.4.0-1022.26","5.4.0-1023.27","5.4.0-1024.28","5.4.0-1025.29","5.4.0-1026.30","5.4.0-1027.31","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1030.34","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1035.39","5.4.0-1036.40","5.4.0-1037.41","5.4.0-1038.42","5.4.0-1039.43","5.4.0-1040.44","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.51","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1050.54","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1058.62","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1082.86","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips2","5.4.0-1069.73+fips2","5.4.0-1071.76+fips1","5.4.0-1072.77+fips1","5.4.0-1073.78+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1083.90+fips1","5.4.0-1085.92+fips1","5.4.0-1086.93+fips1","5.4.0-1088.96+fips1","5.4.0-1089.97+fips1","5.4.0-1092.100+fips1","5.4.0-1093.101+fips1","5.4.0-1094.102+fips1","5.4.0-1096.104+fips1","5.4.0-1099.107+fips1","5.4.0-1100.108+fips1","5.4.0-1101.109+fips1","5.4.0-1102.110+fips1","5.4.0-1103.111+fips1","5.4.0-1104.112+fips1","5.4.0-1105.113+fips1","5.4.0-1106.114+fips1","5.4.0-1107.115+fips1","5.4.0-1108.116+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.123+fips1","5.4.0-1114.124+fips1","5.4.0-1116.126+fips1","5.4.0-1117.127+fips1","5.4.0-1118.128+fips1","5.4.0-1119.129+fips1","5.4.0-1120.130+fips1","5.4.0-1121.131+fips1","5.4.0-1122.132+fips1","5.4.0-1123.133+fips1","5.4.0-1124.134+fips1","5.4.0-1125.135+fips1","5.4.0-1126.136+fips2","5.4.0-1127.137+fips1","5.4.0-1128.138+fips1","5.4.0-1129.139+fips1","5.4.0-1130.140+fips1","5.4.0-1131.141+fips1","5.4.0-1132.142+fips1","5.4.0-1133.143+fips1","5.4.0-1134.144+fips1","5.4.0-1135.145+fips1","5.4.0-1136.146+fips1","5.4.0-1137.147+fips1","5.4.0-1139.149+fips1","5.4.0-1140.151+fips1","5.4.0-1142.153+fips1","5.4.0-1144.155+fips1","5.4.0-1145.156+fips1","5.4.0-1146.156+fips1","5.4.0-1147.157+fips1","5.4.0-1148.158+fips1","5.4.0-1149.159+fips1","5.4.0-1150.160+fips1","5.4.0-1151.161+fips1","5.4.0-1152.162+fips1","5.4.0-1153.163+fips1","5.4.0-1154.164+fips1","5.4.0-1155.165+fips1","5.4.0-1156.166+fips1","5.4.0-1157.167+fips1","5.4.0-1158.168+fips1","5.4.0-1159.169+fips1","5.4.0-1160.170+fips1","5.4.0-1161.172+fips1","5.4.0-1163.174+fips1","5.4.0-1165.176+fips1","5.4.0-1166.177+fips1","5.4.0-1167.178+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1022.22+fips1","5.4.0-1073.76+fips1","5.4.0-1074.77+fips1","5.4.0-1076.79+fips1","5.4.0-1078.81+fips1","5.4.0-1080.83+fips1","5.4.0-1083.87+fips1","5.4.0-1085.90+fips1","5.4.0-1086.91+fips1","5.4.0-1089.94+fips1","5.4.0-1090.95+fips1","5.4.0-1091.96+fips1","5.4.0-1094.100+fips1","5.4.0-1095.101+fips1","5.4.0-1098.104+fips1","5.4.0-1100.106+fips1","5.4.0-1101.107+fips1","5.4.0-1103.109+fips1","5.4.0-1104.110+fips1","5.4.0-1105.111+fips1","5.4.0-1106.112+fips1","5.4.0-1107.113+fips1","5.4.0-1108.114+fips1","5.4.0-1109.115+fips1","5.4.0-1110.116+fips1","5.4.0-1111.117+fips1","5.4.0-1112.118+fips1","5.4.0-1113.119+fips1","5.4.0-1114.120+fips1","5.4.0-1115.122+fips1","5.4.0-1116.123+fips1","5.4.0-1117.124+fips1","5.4.0-1118.125+fips1","5.4.0-1119.126+fips1","5.4.0-1121.128+fips1","5.4.0-1122.129+fips1","5.4.0-1123.130+fips1","5.4.0-1124.131+fips1","5.4.0-1126.133+fips1","5.4.0-1127.134+fips1","5.4.0-1128.135+fips1","5.4.0-1129.136+fips1","5.4.0-1130.137+fips1","5.4.0-1131.138+fips1","5.4.0-1132.139+fips1","5.4.0-1133.140+fips1","5.4.0-1134.141+fips1","5.4.0-1135.142+fips1","5.4.0-1136.143+fips1","5.4.0-1137.144+fips1","5.4.0-1138.145+fips1","5.4.0-1139.146+fips1","5.4.0-1140.147+fips1","5.4.0-1142.149+fips1","5.4.0-1143.150+fips1","5.4.0-1145.152+fips1","5.4.0-1147.154+fips1","5.4.0-1148.156+fips1","5.4.0-1149.157+fips1","5.4.0-1151.158+fips1","5.4.0-1152.159+fips1","5.4.0-1153.160+fips1","5.4.0-1154.161+fips1","5.4.0-1155.162+fips1","5.4.0-1157.164+fips1","5.4.0-1158.165+fips1","5.4.0-1160.166+fips1","5.4.0-1161.167+fips1","5.4.0-1162.168+fips1","5.4.0-1163.169+fips1","5.4.0-1164.170+fips1","5.4.0-1166.172+fips1","5.4.0-1167.173+fips1","5.4.0-1168.174+fips1","5.4.0-1170.176+fips1","5.4.0-1171.177+fips1","5.4.0-1172.178+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1026.30","5.4.0-1028.32","5.4.0-1031.36","5.4.0-1032.37","5.4.0-1033.38","5.4.0-1034.40","5.4.0-1035.41","5.4.0-1036.42","5.4.0-1037.43","5.4.0-1038.44","5.4.0-1040.46","5.4.0-1041.47","5.4.0-1042.48","5.4.0-1043.49","5.4.0-1045.51","5.4.0-1046.52","5.4.0-1047.53","5.4.0-1048.54","5.4.0-1049.55","5.4.0-1051.57","5.4.0-1054.61","5.4.0-1056.64","5.4.0-1057.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1061.69","5.4.0-1062.70","5.4.0-1064.73","5.4.0-1065.74","5.4.0-1068.77","5.4.0-1069.78","5.4.0-1070.79","5.4.0-1072.81","5.4.0-1073.82","5.4.0-1074.83","5.4.0-1075.84","5.4.0-1076.85","5.4.0-1077.86","5.4.0-1078.87","5.4.0-1079.88","5.4.0-1080.89","5.4.0-1081.90","5.4.0-1082.91","5.4.0-1083.92","5.4.0-1084.93","5.4.0-1085.94","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1088.97","5.4.0-1089.98","5.4.0-1090.100","5.4.0-1091.101","5.4.0-1092.102","5.4.0-1094.104","5.4.0-1095.105","5.4.0-1096.106","5.4.0-1097.107","5.4.0-1098.108","5.4.0-1099.109","5.4.0-1100.110","5.4.0-1101.111","5.4.0-1102.112","5.4.0-1103.113","5.4.0-1104.114","5.4.0-1105.115","5.4.0-1106.116","5.4.0-1107.117","5.4.0-1108.118","5.4.0-1109.119","5.4.0-1110.120","5.4.0-1111.121","5.4.0-1112.122","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1138.148","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1141.151"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips1","5.4.0-1067.71~20.04.1","5.4.0-1069.73+fips2","5.4.0-1071.75+fips1","5.4.0-1073.78+fips1","5.4.0-1075.80+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1086.94+fips1","5.4.0-1087.95+fips1","5.4.0-1089.97+fips1","5.4.0-1092.101+fips1","5.4.0-1093.102+fips1","5.4.0-1096.105+fips1","5.4.0-1097.106+fips1","5.4.0-1098.107+fips1","5.4.0-1100.109+fips1","5.4.0-1101.110+fips1","5.4.0-1102.111+fips1","5.4.0-1103.112+fips1","5.4.0-1104.113+fips1","5.4.0-1105.114+fips1","5.4.0-1106.115+fips1","5.4.0-1107.116+fips1","5.4.0-1108.117+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.122+fips1","5.4.0-1115.124+fips1","5.4.0-1116.125+fips1","5.4.0-1117.126+fips1","5.4.0-1118.127+fips1","5.4.0-1120.129+fips1","5.4.0-1121.130+fips1","5.4.0-1122.131+fips1","5.4.0-1124.133+fips1","5.4.0-1125.134+fips1","5.4.0-1126.135+fips1","5.4.0-1127.136+fips1","5.4.0-1128.137+fips1","5.4.0-1129.138+fips1","5.4.0-1130.139+fips1","5.4.0-1131.140+fips1","5.4.0-1132.141+fips1","5.4.0-1133.142+fips1","5.4.0-1134.143+fips1","5.4.0-1135.144+fips1","5.4.0-1136.145+fips1","5.4.0-1137.146+fips1","5.4.0-1138.147+fips1","5.4.0-1139.148+fips1","5.4.0-1140.149+fips1","5.4.0-1141.150+fips1","5.4.0-1142.151+fips1","5.4.0-1143.152+fips1","5.4.0-1145.154+fips1","5.4.0-1146.155+fips1","5.4.0-1147.156+fips1","5.4.0-1148.157+fips1","5.4.0-1149.158+fips1","5.4.0-1150.159+fips1","5.4.0-1151.160+fips1","5.4.0-1152.161+fips1","5.4.0-1153.162+fips1","5.4.0-1154.163+fips1","5.4.0-1155.164+fips1","5.4.0-1156.165+fips1","5.4.0-1157.166+fips1","5.4.0-1159.168+fips1","5.4.0-1160.169+fips1","5.4.0-1161.170+fips1","5.4.0-1162.171+fips1","5.4.0-1163.172+fips1","5.4.0-1164.173+fips1","5.4.0-1165.174+fips1","5.4.0-1166.175+fips1","5.4.0-1167.176+fips1","5.4.0-1168.178+fips1","5.4.0-1169.179+fips1","5.4.0-1170.180+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1022.22+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.86","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.96","5.15.0-87.97","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-112.122","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-130.140","5.15.0-131.141","5.15.0-133.144","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-151.161","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-176.186","5.15.0-177.187","5.15.0-179.189","5.15.0-181.191","5.15.0-185.195","5.15.0-186.196","5.15.0-187.197","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204","5.15.0-198.208","5.15.0-202.212","5.15.0-203.213"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1055.60","5.15.0-1056.61","5.15.0-1057.63","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1076.83","5.15.0-1078.85","5.15.0-1079.86","5.15.0-1080.87","5.15.0-1081.88","5.15.0-1082.89","5.15.0-1083.90","5.15.0-1084.91","5.15.0-1085.92","5.15.0-1086.93","5.15.0-1087.94","5.15.0-1088.95","5.15.0-1089.96","5.15.0-1090.97","5.15.0-1091.98","5.15.0-1092.99","5.15.0-1093.100","5.15.0-1095.102","5.15.0-1096.103","5.15.0-1097.104","5.15.0-1098.105","5.15.0-1099.106","5.15.0-1100.107","5.15.0-1101.108","5.15.0-1103.110","5.15.0-1104.111","5.15.0-1105.112","5.15.0-1106.113","5.15.0-1108.115","5.15.0-1109.116","5.15.0-1111.118","5.15.0-1112.119","5.15.0-1113.120","5.15.0-1114.121","5.15.0-1115.122","5.15.0-1116.123","5.15.0-1117.124","5.15.0-1119.126","5.15.0-1120.127"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1012.12~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.2","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1022.22~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1016.17~22.04.2","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1023.25~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1035.37~22.04.1","6.8.0-1036.38~22.04.1","6.8.0-1039.41~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.44~22.04.1","6.8.0-1043.45~22.04.1","6.8.0-1044.46~22.04.1","6.8.0-1045.47~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1057.60~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.2","6.8.0-1063.66~22.04.1","6.8.0-1064.67~22.04.1","6.8.0-1065.68~22.04.1","6.8.0-1066.69~22.04.1","6.8.0-1069.74~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48","5.15.0-1042.49","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1056.64","5.15.0-1057.65","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.69","5.15.0-1061.70","5.15.0-1063.72","5.15.0-1064.73","5.15.0-1066.75","5.15.0-1067.76","5.15.0-1068.77","5.15.0-1070.79","5.15.0-1071.80","5.15.0-1072.81","5.15.0-1073.82","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1084.93","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1101.110","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1109.118","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1121.130","5.15.0-1122.131","5.15.0-1123.132","5.15.0-1125.134","5.15.0-1126.135"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7~22.04.1","6.5.0-1009.9~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.19~22.04.2","6.5.0-1019.20~22.04.1","6.5.0-1021.22~22.04.1","6.5.0-1022.23~22.04.1","6.5.0-1023.24~22.04.1","6.5.0-1024.25~22.04.1","6.5.0-1025.26~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1012.14~22.04.1","6.8.0-1013.15~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.2","6.8.0-1017.20~22.04.1","6.8.0-1018.21~22.04.1","6.8.0-1020.23~22.04.1","6.8.0-1021.25~22.04.1","6.8.0-1025.30~22.04.1","6.8.0-1026.31~22.04.1","6.8.0-1027.32~22.04.1","6.8.0-1028.33~22.04.1","6.8.0-1029.34~22.04.1","6.8.0-1030.35~22.04.1","6.8.0-1031.36~22.04.1","6.8.0-1034.39~22.04.1","6.8.0-1036.42~22.04.1","6.8.0-1040.46~22.04.1","6.8.0-1041.47~22.04.1","6.8.0-1044.50~22.04.1","6.8.0-1051.57~22.04.1","6.8.0-1052.58~22.04.1","6.8.0-1059.65~22.04.1","6.8.0-1062.69~22.04.1","6.8.0-1063.71~22.04.1","6.8.0-1064.72~22.04.1","6.8.0-1065.73~22.04.1","6.8.0-1067.75~22.04.1","6.8.0-1068.76~22.04.1","6.8.0-1070.78~22.04.1","6.8.0-1073.82~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24.1","5.15.0-1024.30.1","5.15.0-1029.36.1","5.15.0-1030.37.1","5.15.0-1031.38.1","5.15.0-1033.40.1","5.15.0-1034.41.1","5.15.0-1035.42.1","5.15.0-1036.43.1","5.15.0-1037.44.1","5.15.0-1038.45.1","5.15.0-1039.46.1","5.15.0-1041.48.1","5.15.0-1042.49.1","5.15.0-1044.51.1","5.15.0-1045.52.1","5.15.0-1046.53.1","5.15.0-1047.54.1","5.15.0-1049.56.1","5.15.0-1050.57.1","5.15.0-1051.59.1","5.15.0-1052.60.1","5.15.0-1053.61.1","5.15.0-1054.62.1","5.15.0-1056.64.1","5.15.0-1057.65.1","5.15.0-1058.66.1","5.15.0-1059.67.1","5.15.0-1060.69.1","5.15.0-1061.70.1","5.15.0-1063.72.1","5.15.0-1064.73.1","5.15.0-1065.74.1","5.15.0-1067.76.1","5.15.0-1068.77.1","5.15.0-1070.79.1","5.15.0-1071.80.1","5.15.0-1072.81.1","5.15.0-1073.82.1","5.15.0-1076.85.1","5.15.0-1078.87.1","5.15.0-1081.90.1","5.15.0-1082.91.1","5.15.0-1084.93.1","5.15.0-1086.95.1","5.15.0-1087.96.1","5.15.0-1088.97.1","5.15.0-1089.98.1","5.15.0-1090.99.1","5.15.0-1091.100.1","5.15.0-1092.101.1","5.15.0-1094.103.1","5.15.0-1095.104.1","5.15.0-1096.105.1","5.15.0-1097.106.1","5.15.0-1098.107.1","5.15.0-1102.111.1","5.15.0-1109.118.1","5.15.0-1110.119.1","5.15.0-1111.120.1","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1120.129","5.15.0-1121.130","5.15.0-1122.131","5.15.0-1124.133","5.15.0-1125.134"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1041.48~22.04.1","6.8.0-1042.49~22.04.1","6.8.0-1044.51~22.04.1","6.8.0-1046.53~22.04.1","6.8.0-1053.60~22.04.1","6.8.0-1058.65~22.04.1","6.8.0-1061.68~22.04.1","6.8.0-1062.69~22.04.1","6.8.0-1063.70~22.04.1","6.8.0-1064.71~22.04.1","6.8.0-1065.72~22.04.1","6.8.0-1066.73~22.04.1","6.8.0-1068.75~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45","5.15.0-1038.46","5.15.0-1039.47","5.15.0-1040.48","5.15.0-1041.49","5.15.0-1042.50","5.15.0-1044.52","5.15.0-1045.53","5.15.0-1046.54","5.15.0-1047.55","5.15.0-1048.56","5.15.0-1049.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1055.63","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1077.86","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1080.89","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1101.110","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1106.115","5.15.0-1108.117","5.15.0-1109.118","5.15.0-1111.121","5.15.0-1112.122","5.15.0-1114.124","5.15.0-1115.125","5.15.0-1117.127","5.15.0-1118.128","5.15.0-1120.130","5.15.0-1121.131"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1016.18~22.04.1","6.2.0-1017.19~22.04.1","6.2.0-1018.20~22.04.1","6.2.0-1019.21~22.04.1","6.2.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10~22.04.3","6.5.0-1011.11~22.04.1","6.5.0-1013.13~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1022.24~22.04.1","6.5.0-1023.25~22.04.1","6.5.0-1024.26~22.04.1","6.5.0-1025.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1","6.8.0-1012.13~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.1","6.8.0-1016.18~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1025.27~22.04.1","6.8.0-1026.28~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1034.36~22.04.2","6.8.0-1036.38~22.04.1","6.8.0-1037.39~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.2","6.8.0-1048.51~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1063.69~22.04.1","6.8.0-1064.72~22.04.1","6.8.0-1065.73~22.04.1","6.8.0-1066.74~22.04.1","6.8.0-1067.75~22.04.1","6.8.0-1069.77~22.04.1","6.8.0-1070.78~22.04.1","6.8.0-1073.81~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1104.110","5.15.0-1105.111","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119","5.15.0-1115.121","5.15.0-1116.122"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.37","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.50","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1048.55","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.58","5.15.0-1052.59","5.15.0-1053.60","5.15.0-1054.61","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.90","5.15.0-1083.91","5.15.0-1084.92","5.15.0-1086.94","5.15.0-1087.95","5.15.0-1088.96","5.15.0-1089.97","5.15.0-1091.99","5.15.0-1092.100","5.15.0-1094.102","5.15.0-1095.103","5.15.0-1096.104","5.15.0-1097.105","5.15.0-1098.106","5.15.0-1099.107","5.15.0-1100.108","5.15.0-1102.110","5.15.0-1103.111"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1","6.2.0-31.31~22.04.1","6.2.0-32.32~22.04.1","6.2.0-33.33~22.04.1","6.2.0-34.34~22.04.1","6.2.0-35.35~22.04.1","6.2.0-36.37~22.04.1","6.2.0-37.38~22.04.1","6.2.0-39.40~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14~22.04.1","6.5.0-15.15~22.04.1","6.5.0-17.17~22.04.1","6.5.0-18.18~22.04.1","6.5.0-21.21~22.04.1","6.5.0-25.25~22.04.1","6.5.0-26.26~22.04.1","6.5.0-27.28~22.04.1","6.5.0-28.29~22.04.1","6.5.0-35.35~22.04.1","6.5.0-41.41~22.04.2","6.5.0-44.44~22.04.1","6.5.0-45.45~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1","6.8.0-40.40~22.04.3","6.8.0-45.45~22.04.1","6.8.0-47.47~22.04.1","6.8.0-48.48~22.04.1","6.8.0-49.49~22.04.1","6.8.0-50.51~22.04.1","6.8.0-51.52~22.04.1","6.8.0-52.53~22.04.1","6.8.0-57.59~22.04.1","6.8.0-58.60~22.04.1","6.8.0-59.61~22.04.1","6.8.0-60.63~22.04.1","6.8.0-64.67~22.04.1","6.8.0-65.68~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-85.85~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.2","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1","6.8.0-136.136~22.04.1","6.8.0-138.138~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1056.59","5.15.0-1057.60","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1068.71","5.15.0-1069.72","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1081.84","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1094.97","5.15.0-1095.98","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.109","5.15.0-1106.110","5.15.0-1107.111","5.15.0-1108.112","5.15.0-1109.113","5.15.0-1110.114","5.15.0-1111.115","5.15.0-1113.117","5.15.0-1114.118"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.16~22.04.1","6.8.0-1017.17~22.04.1","6.8.0-1018.18~22.04.1","6.8.0-1019.19~22.04.1","6.8.0-1023.23~22.04.1","6.8.0-1024.24~22.04.1","6.8.0-1025.25~22.04.1","6.8.0-1026.26~22.04.1","6.8.0-1027.27~22.04.1","6.8.0-1028.28~22.04.1","6.8.0-1029.29~22.04.1","6.8.0-1030.30~22.04.1","6.8.0-1033.33~22.04.1","6.8.0-1036.36~22.04.1","6.8.0-1037.37~22.04.1","6.8.0-1038.38~22.04.1","6.8.0-1039.39~22.04.1","6.8.0-1040.40~22.04.1","6.8.0-1041.41~22.04.1","6.8.0-1042.42~22.04.1","6.8.0-1043.43~22.04.1","6.8.0-1044.44~22.04.1","6.8.0-1045.45~22.04.1","6.8.0-1049.49~22.04.1","6.8.0-1050.50~22.04.1","6.8.0-1051.51~22.04.1","6.8.0-1052.52~22.04.1","6.8.0-1055.56~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1060.61~22.04.1","6.8.0-1061.62~22.04.1","6.8.0-1062.63~22.04.1","6.8.0-1063.64~22.04.1","6.8.0-1066.67~22.04.1","6.8.0-1069.70~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.49","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1055.61","5.15.0-1057.63","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1098.104","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1103.109","5.15.0-1104.110","5.15.0-1106.112","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1114.120","5.15.0-1115.121"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.65","5.15.0-1061.66","5.15.0-1062.67","5.15.0-1063.68","5.15.0-1064.69","5.15.0-1065.70","5.15.0-1066.71","5.15.0-1067.72","5.15.0-1068.73","5.15.0-1069.74","5.15.0-1070.75","5.15.0-1071.76","5.15.0-1072.77","5.15.0-1073.78","5.15.0-1076.81","5.15.0-1077.82","5.15.0-1078.83","5.15.0-1079.84","5.15.0-1080.85","5.15.0-1081.86","5.15.0-1082.87","5.15.0-1083.88","5.15.0-1084.89","5.15.0-1085.90","5.15.0-1086.91","5.15.0-1087.92","5.15.0-1088.93","5.15.0-1089.94","5.15.0-1090.95","5.15.0-1091.96","5.15.0-1092.97","5.15.0-1093.98","5.15.0-1095.100","5.15.0-1096.101","5.15.0-1097.102","5.15.0-1098.103","5.15.0-1100.105","5.15.0-1101.106","5.15.0-1103.108","5.15.0-1104.109","5.15.0-1105.110","5.15.0-1106.111","5.15.0-1107.112","5.15.0-1108.113","5.15.0-1109.114","5.15.0-1111.116","5.15.0-1112.117"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.88","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.95","5.15.0-87.96","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-110.120","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-129.139","5.15.0-131.141","5.15.0-133.143","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-145.158","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-175.185","5.15.0-177.187","5.15.0-178.188","5.15.0-179.189","5.15.0-181.191","5.15.0-183.193","5.15.0-184.194","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204","5.15.0-195.205","5.15.0-197.207","5.15.0-198.208"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14.1~22.04.1","6.5.0-15.15.1.1~22.04.1","6.5.0-17.17.1.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-41.41.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-44.44.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38.1~22.04.2","6.8.0-40.40.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-45.45.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.3~22.04.1","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-54.56.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-60.63.1~22.04.1","6.8.0-62.65.1~22.04.1","6.8.0-63.66.1~22.04.1","6.8.0-64.67.1~22.04.1","6.8.0-65.68.1~22.04.1","6.8.0-78.78.1~22.04.1","6.8.0-79.79.1~22.04.1","6.8.0-83.83.1~22.04.1","6.8.0-84.84.1~22.04.1","6.8.0-85.85.1~22.04.1","6.8.0-86.87.1~22.04.1","6.8.0-87.88.1~22.04.1","6.8.0-88.89.1~22.04.1","6.8.0-90.91.1~22.04.1","6.8.0-94.96.1~22.04.1","6.8.0-100.100.1~22.04.1","6.8.0-101.101.1~22.04.1","6.8.0-106.106.1~22.04.1","6.8.0-107.107.1~22.04.1","6.8.0-110.110.1~22.04.1","6.8.0-111.111.1~22.04.1","6.8.0-117.117.1~22.04.1","6.8.0-134.134.1~22.04.1","6.8.0-136.136.2~22.04.1","6.8.0-137.137.1~22.04.1","6.8.0-138.138.1~22.04.1","6.8.0-139.139.1~22.04.1","6.8.0-142.142.1~22.04.1","6.8.0-146.146.1~22.04.1","6.8.0-149.149.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1037.37","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1053.54","5.15.0-1054.55","5.15.0-1055.56","5.15.0-1058.59","5.15.0-1059.60","5.15.0-1060.61","5.15.0-1061.62","5.15.0-1062.63","5.15.0-1063.64","5.15.0-1064.65","5.15.0-1065.66","5.15.0-1066.67","5.15.0-1067.68","5.15.0-1068.69","5.15.0-1069.70","5.15.0-1070.71","5.15.0-1071.72","5.15.0-1072.73","5.15.0-1073.74","5.15.0-1074.75","5.15.0-1075.76","5.15.0-1076.77","5.15.0-1077.78","5.15.0-1078.79","5.15.0-1079.80","5.15.0-1080.81","5.15.0-1081.82","5.15.0-1082.83","5.15.0-1083.84","5.15.0-1085.86","5.15.0-1086.87","5.15.0-1087.88","5.15.0-1088.89","5.15.0-1090.91","5.15.0-1091.92","5.15.0-1092.93","5.15.0-1093.94","5.15.0-1094.95","5.15.0-1095.96","5.15.0-1096.97","5.15.0-1098.99","5.15.0-1099.100","5.15.0-1100.101","5.15.0-1101.102","5.15.0-1103.104","5.15.0-1104.105","5.15.0-1106.107","5.15.0-1107.108","5.15.0-1108.109","5.15.0-1109.110","5.15.0-1110.111","5.15.0-1111.112","5.15.0-1112.113","5.15.0-1114.115","5.15.0-1115.116"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1004.4","6.5.0-1007.7","6.5.0-1013.13","6.5.0-1014.14","6.5.0-1015.15","6.5.0-1018.18","6.5.0-1019.19","6.5.0-1021.22","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1022.25~22.04.2","6.8.0-1023.26~22.04.1","6.8.0-1024.27~22.04.1","6.8.0-1025.28~22.04.1","6.8.0-1026.29~22.04.1","6.8.0-1027.30~22.04.1","6.8.0-1028.31~22.04.1","6.8.0-1029.32~22.04.1","6.8.0-1030.33~22.04.1","6.8.0-1031.34~22.04.1","6.8.0-1032.35~22.04.1","6.8.0-1035.38~22.04.1","6.8.0-1036.39~22.04.1","6.8.0-1038.41~22.04.1","6.8.0-1039.42~22.04.1","6.8.0-1040.43~22.04.1","6.8.0-1041.44~22.04.2","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1049.52~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1059.62~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.1","6.8.0-1063.66~22.04.1","6.8.0-1064.67~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1009.9","5.15.0-1010.10","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1030.30","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1051.51","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1058.58","5.15.0-1060.60","5.15.0-1061.61","5.15.0-1063.63","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1068.70","5.15.0-1070.72","5.15.0-1071.73"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1001.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1009.9","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1023.23","5.15.0-1024.24","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1054.54","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1059.59"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17","6.1.0-1019.19","6.1.0-1020.20","6.1.0-1021.21","6.1.0-1022.22","6.1.0-1023.23","6.1.0-1024.24","6.1.0-1025.25","6.1.0-1026.26","6.1.0-1027.27","6.1.0-1028.28","6.1.0-1029.29","6.1.0-1033.33","6.1.0-1034.34","6.1.0-1035.35","6.1.0-1036.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1003.3","6.5.0-1004.4","6.5.0-1006.6","6.5.0-1007.7","6.5.0-1008.8","6.5.0-1009.10","6.5.0-1011.12","6.5.0-1013.14","6.5.0-1014.15","6.5.0-1015.16","6.5.0-1016.17","6.5.0-1018.19","6.5.0-1019.20","6.5.0-1020.21","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25","6.5.0-1025.26","6.5.0-1027.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1041.47","5.15.0-1042.48","5.15.0-1044.50","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.61","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1098.104","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1103.109","5.15.0-1105.111","5.15.0-1106.112","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119","5.15.0-1114.120","5.15.0-1116.122","5.15.0-1117.123"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1013.13~22.04.4","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1019.19~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1","6.5.0-1025.25~22.04.1","6.5.0-1026.26~22.04.1","6.5.0-1027.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.17~22.04.1","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.20~22.04.1","6.8.0-1020.21~22.04.1","6.8.0-1021.22~22.04.1","6.8.0-1022.23~22.04.1","6.8.0-1023.24~22.04.1","6.8.0-1024.25~22.04.1","6.8.0-1025.26~22.04.1","6.8.0-1026.27~22.04.1","6.8.0-1027.28~22.04.1","6.8.0-1028.29~22.04.1","6.8.0-1029.30~22.04.1","6.8.0-1030.31~22.04.1","6.8.0-1032.33~22.04.1","6.8.0-1033.34~22.04.1","6.8.0-1035.36~22.04.1","6.8.0-1037.38~22.04.1","6.8.0-1038.39~22.04.1","6.8.0-1039.40~22.04.1","6.8.0-1040.41~22.04.1","6.8.0-1041.42~22.04.1","6.8.0-1042.43~22.04.1","6.8.0-1043.44~22.04.1","6.8.0-1044.45~22.04.1","6.8.0-1047.48~22.04.1","6.8.0-1049.50~22.04.1","6.8.0-1050.51~22.04.1","6.8.0-1052.53~22.04.1","6.8.0-1054.55~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1059.62~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.1","6.8.0-1067.71~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.20","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1025.27","5.15.0-1026.28","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1029.31","5.15.0-1030.32","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1083.86","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.108","5.15.0-1106.109","5.15.0-1108.111","5.15.0-1110.113"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-17.17.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-40.40.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38.1~22.04.1","6.8.0-39.39.1~22.04.1","6.8.0-40.40.1~22.04.1","6.8.0-41.41.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.1~22.04.2","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-53.55.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-62.65~22.04.1","6.8.0-63.66~22.04.1","6.8.0-64.67~22.04.1","6.8.0-71.71~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.1","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1","6.8.0-136.136~22.04.3","6.8.0-137.137~22.04.1","6.8.0-138.138~22.04.1","6.8.0-139.139~22.04.1","6.8.0-142.142~22.04.1","6.8.0-146.146~22.04.1","6.8.0-149.149~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1006.7~22.04.1","6.2.0-1007.8~22.04.1","6.2.0-1009.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.8~22.04.1","6.5.0-1008.9~22.04.1","6.5.0-1009.10~22.04.1","6.5.0-1010.11~22.04.1","6.5.0-1011.12~22.04.1","6.5.0-1012.13~22.04.1","6.5.0-1014.15~22.04.1","6.5.0-1015.16~22.04.1","6.5.0-1016.17~22.04.1","6.5.0-1017.18~22.04.1","6.5.0-1018.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1022.26","5.15.0-1023.27","5.15.0-1025.29","5.15.0-1027.31","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.42","5.15.0-1039.43","5.15.0-1041.45","5.15.0-1044.48","5.15.0-1046.50","5.15.0-1050.54","5.15.0-1051.55","5.15.0-1052.56","5.15.0-1053.57","5.15.0-1054.58","5.15.0-1055.59","5.15.0-1056.60","5.15.0-1057.61","5.15.0-1059.63","5.15.0-1060.64","5.15.0-1061.65","5.15.0-1062.66","5.15.0-1063.67","5.15.0-1064.68","5.15.0-1065.69","5.15.0-1067.71","5.15.0-1068.72","5.15.0-1069.73","5.15.0-1070.74","5.15.0-1074.78","5.15.0-1075.79","5.15.0-1076.80","5.15.0-1077.81","5.15.0-1078.82","5.15.0-1079.83","5.15.0-1080.84"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:22.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1017.19","5.15.0-1019.21","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1031.33","5.15.0-1032.34","5.15.0-1033.35","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1040.42","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1045.47","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1050.52","5.15.0-1051.53","5.15.0-1052.54","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1062.64","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1069.71","5.15.0-1070.72","5.15.0-1072.74","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1095.97","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105","5.15.0-1104.106"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1028.33","5.15.0-1033.35","5.15.0-1034.36","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1039.41","5.15.0-1040.42","5.15.0-1041.43","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1046.48","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1049.51","5.15.0-1050.52","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1055.57","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1066.68","5.15.0-1071.73","5.15.0-1072.74","5.15.0-1073.75","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1078.80","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1088.90","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1091.93","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1094.96","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105","5.15.0-1104.106","5.15.0-1105.107","5.15.0-1106.108","5.15.0-1107.109","5.15.0-1108.110","5.15.0-1109.111","5.15.0-1111.115","5.15.0-1112.116"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1006.6","5.15.0-1007.7","5.15.0-1009.9","5.15.0-1011.11","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1024.25","5.15.0-1025.28","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1039.42","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.52","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1077.85","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1107.116","5.15.0-1108.117","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1112.121","5.15.0-1113.122","5.15.0-1114.123","5.15.0-1115.124","5.15.0-1116.125","5.15.0-1118.127","5.15.0-1119.128"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1004.4~22.04.1","6.8.1-1005.5~22.04.2","6.8.1-1006.6~22.04.1","6.8.1-1007.7~22.04.1","6.8.1-1008.8~22.04.1","6.8.1-1009.9~22.04.1","6.8.1-1010.10~22.04.1","6.8.1-1011.11~22.04.1","6.8.1-1012.12~22.04.1","6.8.1-1013.14~22.04.1","6.8.1-1014.15~22.04.1","6.8.1-1015.16~22.04.1","6.8.1-1016.17~22.04.1","6.8.1-1017.18~22.04.1","6.8.1-1018.19~22.04.1","6.8.1-1019.20~22.04.1","6.8.1-1020.21~22.04.1","6.8.1-1021.22~22.04.1","6.8.1-1022.23~22.04.1","6.8.1-1023.24~22.04.1","6.8.1-1024.25~22.04.1","6.8.1-1025.26~22.04.1","6.8.1-1026.27~22.04.1","6.8.1-1030.31~22.04.1","6.8.1-1031.32~22.04.1","6.8.1-1034.35~22.04.1","6.8.1-1035.36~22.04.1","6.8.1-1036.37~22.04.1","6.8.1-1037.38~22.04.1","6.8.1-1038.39~22.04.1","6.8.1-1039.40~22.04.1","6.8.1-1040.41~22.04.1","6.8.1-1041.42~22.04.1","6.8.1-1042.43~22.04.1","6.8.1-1045.46~22.04.1","6.8.1-1046.47~22.04.2","6.8.1-1047.48~22.04.1","6.8.1-1048.49~22.04.1","6.8.1-1051.52~22.04.1","6.8.1-1052.53~22.04.1","6.8.1-1055.56~22.04.1","6.8.1-1056.57~22.04.2","6.8.1-1057.58~22.04.1","6.8.1-1058.59~22.04.1","6.8.1-1059.60~22.04.1","6.8.1-1060.61~22.04.1","6.8.1-1061.62~22.04.1","6.8.1-1064.65~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1042.47+fips1","5.15.0-1051.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1053.61+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1048.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1051.56+fips1","5.15.0-1052.57+fips1","5.15.0-1053.58+fips1","5.15.0-1055.60+fips1","5.15.0-1056.61+fips1","5.15.0-1057.63+fips1","5.15.0-1060.66+fips1","5.15.0-1061.67+fips1","5.15.0-1062.68+fips1","5.15.0-1063.69+fips1","5.15.0-1064.70+fips1","5.15.0-1065.71+fips1","5.15.0-1066.72+fips1","5.15.0-1067.73+fips1","5.15.0-1068.74+fips1","5.15.0-1069.75+fips1","5.15.0-1070.76+fips1","5.15.0-1071.77+fips1","5.15.0-1072.78+fips1","5.15.0-1073.79+fips1","5.15.0-1076.83+fips1","5.15.0-1077.84+fips1","5.15.0-1078.85+fips1","5.15.0-1079.86+fips1","5.15.0-1080.87+fips1","5.15.0-1081.88+fips1","5.15.0-1082.89+fips1","5.15.0-1083.90+fips1","5.15.0-1084.91+fips1","5.15.0-1085.92+fips1","5.15.0-1086.93+fips1","5.15.0-1087.94+fips1","5.15.0-1088.95+fips1","5.15.0-1089.96+fips1","5.15.0-1090.97+fips1","5.15.0-1091.98+fips1","5.15.0-1092.99+fips1","5.15.0-1093.100+fips1","5.15.0-1095.102+fips1","5.15.0-1096.103+fips1","5.15.0-1097.104+fips1","5.15.0-1098.105+fips1","5.15.0-1099.106+fips1","5.15.0-1100.107+fips1","5.15.0-1101.108+fips1","5.15.0-1103.110+fips1","5.15.0-1104.111+fips1","5.15.0-1105.112+fips1","5.15.0-1106.113+fips1","5.15.0-1108.115+fips1","5.15.0-1109.116+fips1","5.15.0-1111.118+fips1","5.15.0-1112.119+fips1","5.15.0-1113.120+fips1","5.15.0-1114.121+fips1","5.15.0-1115.122+fips1","5.15.0-1116.123+fips1","5.15.0-1117.124+fips1","5.15.0-1119.126+fips1","5.15.0-1120.127+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1053.61+fips1","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.69+fips1","5.15.0-1061.70+fips1","5.15.0-1063.72+fips1","5.15.0-1064.73+fips1","5.15.0-1065.74+fips1","5.15.0-1067.76+fips1","5.15.0-1068.77+fips1","5.15.0-1070.79+fips1","5.15.0-1071.80+fips1","5.15.0-1072.81+fips1","5.15.0-1073.82+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1085.94+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1089.98+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1094.103+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1101.110+fips1","5.15.0-1102.111+fips1","5.15.0-1103.112+fips1","5.15.0-1109.118+fips1","5.15.0-1110.119+fips1","5.15.0-1111.120+fips1","5.15.0-1114.123+fips1","5.15.0-1116.125+fips1","5.15.0-1117.126+fips1","5.15.0-1118.127+fips1","5.15.0-1119.128+fips1","5.15.0-1121.130+fips1","5.15.0-1122.131+fips1","5.15.0-1123.132+fips1","5.15.0-1125.134+fips1","5.15.0-1126.135+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1","5.15.0-92.102+fips1","5.15.0-94.104+fips1","5.15.0-97.107+fips1","5.15.0-100.110+fips1","5.15.0-101.111+fips1","5.15.0-102.112+fips1","5.15.0-105.115+fips1","5.15.0-106.116+fips1","5.15.0-107.117+fips1","5.15.0-111.121+fips1","5.15.0-113.123+fips1","5.15.0-115.125+fips1","5.15.0-117.127+fips1","5.15.0-118.128+fips1","5.15.0-119.129+fips1","5.15.0-121.131+fips1","5.15.0-122.132+fips1","5.15.0-124.134+fips1","5.15.0-125.135+fips1","5.15.0-127.137+fips1","5.15.0-128.138+fips1","5.15.0-130.140+fips1","5.15.0-131.141+fips1","5.15.0-133.144+fips1","5.15.0-134.145+fips1","5.15.0-135.146+fips1","5.15.0-136.147+fips1","5.15.0-138.148+fips1","5.15.0-139.149+fips1","5.15.0-140.150+fips1","5.15.0-141.151+fips1","5.15.0-142.152+fips1","5.15.0-143.153+fips1","5.15.0-144.157+fips1","5.15.0-145.158+fips1","5.15.0-152.162+fips1","5.15.0-153.163+fips1","5.15.0-156.166+fips1","5.15.0-157.167+fips1","5.15.0-160.170+fips1","5.15.0-161.171+fips1","5.15.0-163.173+fips1","5.15.0-164.174+fips1","5.15.0-168.178+fips1","5.15.0-170.180+fips1","5.15.0-171.181+fips1","5.15.0-173.183+fips1","5.15.0-174.184+fips1","5.15.0-176.186+fips1","5.15.0-177.187+fips1","5.15.0-179.189+fips1","5.15.0-181.191+fips1","5.15.0-185.195+fips1","5.15.0-186.196+fips1","5.15.0-190.200+fips1","5.15.0-191.201+fips1","5.15.0-194.204+fips1","5.15.0-198.208+fips1","5.15.0-202.212+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1048.56+fips1","5.15.0-1055.63+fips2","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.68+fips1","5.15.0-1062.70+fips1","5.15.0-1063.71+fips1","5.15.0-1064.72+fips1","5.15.0-1065.73+fips1","5.15.0-1066.74+fips1","5.15.0-1067.75+fips1","5.15.0-1068.76+fips1","5.15.0-1069.77+fips1","5.15.0-1070.78+fips1","5.15.0-1071.79+fips1","5.15.0-1072.80+fips1","5.15.0-1073.81+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1077.86+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1081.90+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1084.93+fips1","5.15.0-1085.94+fips1","5.15.0-1086.95+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1092.101+fips1","5.15.0-1093.102+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1099.108+fips1","5.15.0-1100.109+fips1","5.15.0-1101.110+fips1","5.15.0-1103.112+fips1","5.15.0-1104.113+fips1","5.15.0-1105.114+fips1","5.15.0-1106.115+fips1","5.15.0-1108.117+fips1","5.15.0-1109.118+fips1","5.15.0-1111.121+fips1","5.15.0-1112.122+fips1","5.15.0-1114.124+fips1","5.15.0-1115.125+fips1","5.15.0-1116.126+fips1","5.15.0-1118.128+fips1","5.15.0-1120.130+fips1","5.15.0-1121.131+fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55","6.8.0-54.56","6.8.0-55.57","6.8.0-56.58","6.8.0-57.59","6.8.0-58.60","6.8.0-59.61","6.8.0-60.63","6.8.0-62.65","6.8.0-63.66","6.8.0-64.67","6.8.0-71.71","6.8.0-78.78","6.8.0-79.79","6.8.0-83.83","6.8.0-84.84","6.8.0-85.85","6.8.0-86.87","6.8.0-87.88","6.8.0-88.89","6.8.0-90.91","6.8.0-94.96","6.8.0-100.100","6.8.0-101.101","6.8.0-106.106","6.8.0-107.107","6.8.0-110.110","6.8.0-111.111","6.8.0-117.117","6.8.0-124.124","6.8.0-134.134","6.8.0-136.136","6.8.0-137.137","6.8.0-138.138","6.8.0-139.139","6.8.0-142.142","6.8.0-146.146","6.8.0-147.147","6.8.0-149.149"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1035.37","6.8.0-1036.38","6.8.0-1038.40","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.44","6.8.0-1043.45","6.8.0-1044.46","6.8.0-1045.47","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1055.58","6.8.0-1057.60","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67","6.8.0-1065.68","6.8.0-1066.69","6.8.0-1067.70","6.8.0-1069.74"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.2","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1019.19~24.04.1","6.17.0-1020.20~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1012.12~24.04.1"}]}],"versions":["7.0.0-1007.7~24.04.2","7.0.0-1009.9~24.04.1","7.0.0-1010.10~24.04.1","7.0.0-1011.11~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25","6.8.0-1025.30","6.8.0-1026.31","6.8.0-1027.32","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1034.39","6.8.0-1038.44","6.8.0-1040.46","6.8.0-1041.47","6.8.0-1042.48","6.8.0-1044.50","6.8.0-1046.52","6.8.0-1051.57","6.8.0-1052.58","6.8.0-1054.60","6.8.0-1056.62","6.8.0-1058.64","6.8.0-1059.65","6.8.0-1062.69","6.8.0-1063.71","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1067.75","6.8.0-1068.76","6.8.0-1070.78","6.8.0-1071.79"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1010.10~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1008.8~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.2","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1020.20~24.04.1","6.17.0-1021.21~24.04.1","6.17.0-1022.22"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14~24.04.1"}]}],"versions":["7.0.0-1008.8~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1041.48","6.8.0-1044.51","6.8.0-1046.53","6.8.0-1053.60","6.8.0-1058.65","6.8.0-1061.68","6.8.0-1062.69","6.8.0-1063.70","6.8.0-1064.71","6.8.0-1065.72","6.8.0-1066.73","6.8.0-1068.75","6.8.0-1069.76"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13~24.04.1"}]}],"versions":["7.0.0-1007.7~24.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1013.14","6.8.0-1014.15","6.8.0-1016.17","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1022.23","6.8.0-1025.27","6.8.0-1027.30","6.8.0-1029.32","6.8.0-1039.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3","6.14.0-1006.6","6.14.0-1007.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1034.36","6.8.0-1036.38","6.8.0-1037.39","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1048.51","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1060.63","6.8.0-1063.69","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1066.74","6.8.0-1067.75","6.8.0-1069.77","6.8.0-1070.78","6.8.0-1071.79","6.8.0-1073.81"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1014.15~24.04.1","6.14.0-1015.16~24.04.1","6.14.0-1016.17~24.04.1","6.14.0-1017.18~24.04.1","6.14.0-1018.19~24.04.1","6.14.0-1019.20~24.04.1","6.14.0-1020.21~24.04.1","6.14.0-1021.22~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.3","6.17.0-1008.8~24.04.1","6.17.0-1009.9~24.04.3","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1016.17~24.04.1","6.17.0-1018.19~24.04.1","6.17.0-1020.22~24.04.1","6.17.0-1021.24~24.04.1","6.17.0-1022.25"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1021.25","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1024.28","6.8.0-1025.29","6.8.0-1026.30","6.8.0-1027.31","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1032.36","6.8.0-1033.37","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1037.41","6.8.0-1038.43","6.8.0-1039.44","6.8.0-1040.45","6.8.0-1041.46","6.8.0-1042.47","6.8.0-1043.48","6.8.0-1044.49","6.8.0-1048.53","6.8.0-1049.54","6.8.0-1050.56","6.8.0-1051.57","6.8.0-1054.60","6.8.0-1055.61","6.8.0-1058.64","6.8.0-1059.67","6.8.0-1060.68","6.8.0-1061.69","6.8.0-1062.70","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1066.74","6.8.0-1068.77"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6","6.8.0-1006.8","6.8.0-1007.9","6.8.0-1008.10","6.8.0-1009.11","6.8.0-1010.12","6.8.0-1011.13","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1022.24","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1037.40","6.8.0-1038.41","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1045.48","6.8.0-1046.50","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1049.53","6.8.0-1050.54","6.8.0-1051.55","6.8.0-1052.56","6.8.0-1053.57"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-24.24~24.04.3","6.14.0-27.27~24.04.1","6.14.0-28.28~24.04.1","6.14.0-29.29~24.04.1","6.14.0-32.32~24.04.1","6.14.0-33.33~24.04.1","6.14.0-34.34~24.04.1","6.14.0-35.35~24.04.1","6.14.0-36.36~24.04.1","6.14.0-37.37~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14~24.04.1","6.17.0-19.19~24.04.2","6.17.0-20.20~24.04.1","6.17.0-22.22~24.04.1","6.17.0-23.23~24.04.1","6.17.0-29.29~24.04.1","6.17.0-35.35~24.04.1","6.17.0-40.40~24.04.1","6.17.0-41.41~24.04.1","6.17.0-42.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31~24.04.1"}]}],"versions":["7.0.0-14.14~24.04.3","7.0.0-28.28~24.04.1","7.0.0-29.29~24.04.2","7.0.0-30.30~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1033.33","6.8.0-1036.36","6.8.0-1037.37","6.8.0-1038.38","6.8.0-1039.39","6.8.0-1040.40","6.8.0-1041.41","6.8.0-1042.42","6.8.0-1043.43","6.8.0-1044.44","6.8.0-1045.45","6.8.0-1049.49","6.8.0-1050.50","6.8.0-1051.51","6.8.0-1052.52","6.8.0-1055.56","6.8.0-1057.58","6.8.0-1060.61","6.8.0-1061.62","6.8.0-1062.63","6.8.0-1063.64","6.8.0-1064.65","6.8.0-1065.66","6.8.0-1066.67","6.8.0-1067.68","6.8.0-1069.70"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2","6.8.0-54.56.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1","6.8.0-62.65.1","6.8.0-63.66.1","6.8.0-64.67.1","6.8.0-65.68.1","6.8.0-78.78.1","6.8.0-79.79.1","6.8.0-83.83.1","6.8.0-84.84.1","6.8.0-85.85.1","6.8.0-86.87.1","6.8.0-87.88.1","6.8.0-88.89.1","6.8.0-90.91.1","6.8.0-94.96.1","6.8.0-100.100.1","6.8.0-101.101.1","6.8.0-106.106.1","6.8.0-107.107.1","6.8.0-110.110.1","6.8.0-111.111.1","6.8.0-117.117.1","6.8.0-134.134.1","6.8.0-136.136.2","6.8.0-137.137.1","6.8.0-138.138.1","6.8.0-139.139.1","6.8.0-142.142.1","6.8.0-146.146.1","6.8.0-147.147.1","6.8.0-149.149.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1022.25","6.8.0-1023.26","6.8.0-1024.27","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1032.35","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1038.41","6.8.0-1039.42","6.8.0-1040.43","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1049.52","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1059.62","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67","6.8.0-1067.70"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1002.2","6.11.0-1003.3","6.11.0-1007.7","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4","6.17.0-1008.8","6.17.0-1014.14","6.17.0-1018.18","6.17.0-1021.21","6.17.0-1026.26","6.17.0-1029.29","6.17.0-1031.31","6.17.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1018.18~24.04.1"}]}],"versions":["7.0.0-1013.13~24.04.1","7.0.0-1015.15~24.04.1","7.0.0-1016.16~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1009.9.1","6.8.0-1011.11.1","6.8.0-1012.12.1","6.8.0-1013.14.1","6.8.0-1014.15.1","6.8.0-1015.16.1","6.8.0-1017.19.1","6.8.0-1018.20.1","6.8.0-1019.21.1","6.8.0-1020.22.1","6.8.0-1021.23.1","6.8.0-1022.25.2","6.8.0-1023.26.1","6.8.0-1024.27.1","6.8.0-1025.28.1","6.8.0-1026.29.1","6.8.0-1027.30.1","6.8.0-1028.31.1","6.8.0-1029.32.1","6.8.0-1030.33.1","6.8.0-1031.34.1","6.8.0-1032.35.1","6.8.0-1035.38.1","6.8.0-1036.39.1","6.8.0-1038.41.1","6.8.0-1039.42.1","6.8.0-1040.43.1","6.8.0-1041.44.1","6.8.0-1042.45.1","6.8.0-1043.46.1","6.8.0-1044.47.1","6.8.0-1045.48.1","6.8.0-1046.49.1","6.8.0-1047.50.1","6.8.0-1049.52.1","6.8.0-1050.53.1","6.8.0-1051.54.1","6.8.0-1052.55.1","6.8.0-1054.57.1","6.8.0-1055.58.1","6.8.0-1058.61.1","6.8.0-1059.62.1","6.8.0-1060.63.1","6.8.0-1061.64.1","6.8.0-1062.65.1","6.8.0-1063.66.1","6.8.0-1064.67.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1036.39"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1031.32","6.8.0-1032.34","6.8.0-1035.38"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1007.7","6.11.0-1008.8","6.11.0-1009.9","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1015.15","6.11.0-1016.16","6.11.0-1017.17","6.11.0-1018.18","6.11.0-1020.20","6.11.0-1021.21","6.11.0-1022.22","6.11.0-1023.23","6.11.0-1024.24","6.11.0-1025.25","6.11.0-1027.27"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1004.4","6.14.0-1005.5","6.14.0-1006.6","6.14.0-1007.7","6.14.0-1008.8","6.14.0-1010.10","6.14.0-1011.11","6.14.0-1012.12","6.14.0-1013.13","6.14.0-1014.14","6.14.0-1015.15","6.14.0-1016.16","6.14.0-1017.17","6.14.0-1018.18","6.14.0-1019.19","6.14.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1008.8","6.17.0-1009.9","6.17.0-1010.10","6.17.0-1011.11","6.17.0-1012.12","6.17.0-1017.17","6.17.0-1020.20","6.17.0-1023.23","6.17.0-1024.24","6.17.0-1025.25","6.17.0-1028.28","6.17.0-1030.30","6.17.0-1032.32","6.17.0-1033.33"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1031.31","6.8.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1025.26","6.8.0-1026.27","6.8.0-1027.28","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1035.36","6.8.0-1037.38","6.8.0-1038.39","6.8.0-1039.40","6.8.0-1040.41","6.8.0-1041.42","6.8.0-1042.43","6.8.0-1043.44","6.8.0-1044.45","6.8.0-1047.48","6.8.0-1049.50","6.8.0-1050.51","6.8.0-1052.53","6.8.0-1054.55","6.8.0-1057.58","6.8.0-1058.61","6.8.0-1059.62","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67","6.8.0-1067.71"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.1","6.17.0-1014.14~24.04.1","6.17.0-1016.16~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1019.19~24.04.3","6.17.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1024.28","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1030.34","6.8.0-1031.35","6.8.0-1032.36","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1038.42","6.8.0-1039.43","6.8.0-1040.44","6.8.0-1041.45","6.8.0-1042.46","6.8.0-1043.47","6.8.0-1044.48","6.8.0-1045.49","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1050.54","6.8.0-1051.55","6.8.0-1052.56","6.8.0-1053.57","6.8.0-1056.60","6.8.0-1057.61","6.8.0-1060.64","6.8.0-1061.65","6.8.0-1062.66","6.8.0-1063.67","6.8.0-1064.68","6.8.0-1065.69","6.8.0-1068.72"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-22.22.1~24.04.1","6.14.0-23.23.1~24.04.1","6.14.0-24.24.1~24.04.1","6.14.0-27.27.1~24.04.1","6.14.0-28.28.1~24.04.1","6.14.0-29.29.1~24.04.1","6.14.0-32.32.1~24.04.1","6.14.0-33.33.1~24.04.1","6.14.0-34.34.1~24.04.1","6.14.0-35.35.1~24.04.1","6.14.0-36.36.1~24.04.1","6.14.0-37.37.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14.1~24.04.1","6.17.0-19.19.1~24.04.1","6.17.0-20.20.1~24.04.1","6.17.0-22.22.1~24.04.1","6.17.0-23.23.1~24.04.1","6.17.0-29.29.1~24.04.1","6.17.0-35.35.1~24.04.1","6.17.0-38.38.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31.1~24.04.1"}]}],"versions":["7.0.0-27.27.1~24.04.2","7.0.0-28.28.1~24.04.3","7.0.0-30.30.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1005.5","6.8.0-1008.8","6.8.0-1010.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-xilinx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.9","6.8.0-1009.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1034.35","6.8.0-1035.36","6.8.0-1036.37"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:24.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1011.15","6.8.0-1012.16","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1026.30","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1032.37","6.8.0-1033.38","6.8.0-1036.41"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.7.0-2001.1","6.8.0-2001.1","6.8.0-2002.2","6.8.0-2004.4","6.8.0-2005.5","6.8.0-2006.6","6.8.0-2007.7","6.8.0-2008.8","6.8.0-2009.9","6.8.0-2010.10","6.8.0-2011.11","6.8.0-2012.12","6.8.0-2013.14","6.8.0-2014.15","6.8.0-2015.16","6.8.0-2016.17","6.8.0-2017.18","6.8.0-2018.19","6.8.0-2019.20","6.8.0-2022.23","6.8.0-2023.24","6.8.0-2024.25","6.8.0-2025.26","6.8.0-2026.27","6.8.0-2028.29","6.8.0-2029.30","6.8.0-2030.31","6.8.0-2031.32","6.8.0-2032.33","6.8.0-2033.34","6.8.0-2034.35","6.8.0-2035.36","6.8.0-2036.37","6.8.0-2037.38","6.8.0-2038.39","6.8.0-2040.41","6.8.0-2041.42","6.8.0-2042.43","6.8.0-2043.44","6.8.0-2045.46","6.8.0-2046.47","6.8.0-2049.50","6.8.0-2050.52","6.8.0-2051.53","6.8.0-2052.54","6.8.0-2053.55","6.8.0-2054.56","6.8.0-2056.58"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5","6.8.1-1006.6","6.8.1-1007.7","6.8.1-1008.8","6.8.1-1009.9","6.8.1-1010.10","6.8.1-1011.11","6.8.1-1012.12","6.8.1-1013.14","6.8.1-1014.15","6.8.1-1015.16","6.8.1-1016.17","6.8.1-1017.18","6.8.1-1018.19","6.8.1-1019.20","6.8.1-1020.21","6.8.1-1021.22","6.8.1-1022.23","6.8.1-1023.24","6.8.1-1024.25","6.8.1-1025.26","6.8.1-1026.27","6.8.1-1030.31","6.8.1-1031.32","6.8.1-1033.34","6.8.1-1034.35","6.8.1-1035.36","6.8.1-1036.37","6.8.1-1037.38","6.8.1-1038.39","6.8.1-1039.40","6.8.1-1040.41","6.8.1-1041.42","6.8.1-1042.43","6.8.1-1045.46","6.8.1-1046.47","6.8.1-1047.48","6.8.1-1048.49","6.8.1-1051.52","6.8.1-1052.53","6.8.1-1055.56","6.8.1-1056.57","6.8.1-1057.58","6.8.1-1058.59","6.8.1-1059.60","6.8.1-1060.61","6.8.1-1061.62","6.8.1-1062.63","6.8.1-1064.65"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3~24.04.3","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.5~24.04.2","6.17.0-1006.7~24.04.1","6.17.0-1008.9~24.04.1","6.17.0-1009.10~24.04.1","6.17.0-1010.11~24.04.1","6.17.0-1011.12~24.04.1","6.17.0-1013.15~24.04.1","6.17.0-1014.16~24.04.1","6.17.0-1017.19~24.04.1","6.17.0-1018.20~24.04.1","6.17.0-1019.22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1035.37+fips1","6.8.0-1036.38+fips1","6.8.0-1038.40+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.44+fips1","6.8.0-1043.45+fips1","6.8.0-1044.46+fips1","6.8.0-1045.47+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1050.53+fips1","6.8.0-1051.54+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1055.58+fips1","6.8.0-1057.60+fips1","6.8.0-1060.63+fips1","6.8.0-1061.64+fips1","6.8.0-1062.65+fips1","6.8.0-1063.66+fips1","6.8.0-1064.67+fips1","6.8.0-1065.68+fips1","6.8.0-1066.69+fips1","6.8.0-1067.70+fips1","6.8.0-1069.74+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1034.39+fips1","6.8.0-1040.46+fips1","6.8.0-1044.50+fips1","6.8.0-1046.52+fips1","6.8.0-1047.53+fips1","6.8.0-1052.58+fips1","6.8.0-1053.59+fips1","6.8.0-1054.60+fips1","6.8.0-1059.65+fips1","6.8.0-1062.69+fips1","6.8.0-1063.71+fips2","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1069.77+fips1","6.8.0-1071.79+fips1","6.8.0-1073.82+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38+fips4","6.8.0-78.78+fips1","6.8.0-79.79+fips1","6.8.0-83.83+fips1","6.8.0-84.84+fips1","6.8.0-85.85+fips1","6.8.0-86.87+fips1","6.8.0-87.88+fips1","6.8.0-88.89+fips1","6.8.0-90.91+fips1","6.8.0-94.96+fips1","6.8.0-100.100+fips1","6.8.0-101.101+fips1","6.8.0-106.106+fips1","6.8.0-107.107+fips1","6.8.0-110.110+fips2","6.8.0-111.111+fips1","6.8.0-116.116+fips1","6.8.0-124.124+fips1","6.8.0-134.134+fips1","6.8.0-136.136+fips2","6.8.0-137.137+fips1","6.8.0-138.138+fips1","6.8.0-139.139+fips1","6.8.0-142.142+fips1","6.8.0-146.146+fips1","6.8.0-147.147+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1036.38+fips1","6.8.0-1037.39+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.45+fips1","6.8.0-1043.46+fips1","6.8.0-1044.47+fips1","6.8.0-1045.48+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1048.51+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1054.57+fips1","6.8.0-1055.58+fips1","6.8.0-1058.61+fips1","6.8.0-1060.63+fips1","6.8.0-1063.69+fips1","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1066.74+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1070.78+fips1","6.8.0-1071.79+fips1","6.8.0-1073.81+fips1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31"}]}],"versions":["6.17.0-5.5","6.17.0-6.6","6.17.0-8.8","6.18.0-8.8","6.18.0-9.9","6.19.0-3.3","6.19.0-5.5","6.19.0-6.6","6.19.0-9.9","7.0.0-7.7","7.0.0-10.10","7.0.0-12.12","7.0.0-13.13","7.0.0-14.14","7.0.0-15.15","7.0.0-22.22","7.0.0-27.27","7.0.0-28.28","7.0.0-29.29","7.0.0-30.30"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1012.12"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1002.2","6.19.0-1003.3","7.0.0-1001.1","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14"}]}],"versions":["6.17.0-1003.3","6.17.0-1004.4","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13"}]}],"versions":["7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1010.10"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1006.7"}]}],"versions":["7.0.0-1002.3","7.0.0-1003.4","7.0.0-1005.6"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13"}]}],"versions":["6.19.0-1002.2","6.19.0-1003.3","7.0.0-1002.2","7.0.0-1004.4","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1018.18"}]}],"versions":["7.0.0-1005.5","7.0.0-1006.6","7.0.0-1009.9","7.0.0-1013.13","7.0.0-1015.15","7.0.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia-bos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-2018.18"}]}],"versions":["7.0.0-2012.12","7.0.0-2015.15","7.0.0-2016.16"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13"}]}],"versions":["7.0.0-1005.5","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1019.19"}]}],"versions":["6.17.0-1003.3","7.0.0-1004.4","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1014.14","7.0.0-1015.15","7.0.0-1016.16","7.0.0-1017.17"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31.1"}]}],"versions":["6.17.0-1001.2","7.0.0-10.10.3","7.0.0-12.12.1","7.0.0-14.14.1","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31.1"}]}],"versions":["6.17.0-5.5.1","7.0.0-7.7.1","7.0.0-12.12.1","7.0.0-14.14.2","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1012.12~24.04.1"}]}],"versions":["7.0.0-1007.7~24.04.2","7.0.0-1009.9~24.04.1","7.0.0-1010.10~24.04.1","7.0.0-1011.11~24.04.1"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31~24.04.1"}]}],"versions":["7.0.0-14.14~24.04.3","7.0.0-28.28~24.04.1","7.0.0-29.29~24.04.2","7.0.0-30.30~24.04.1"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31"}]}],"versions":["6.17.0-5.5","6.17.0-6.6","6.17.0-8.8","6.18.0-8.8","6.18.0-9.9","6.19.0-3.3","6.19.0-5.5","6.19.0-6.6","6.19.0-9.9","7.0.0-7.7","7.0.0-10.10","7.0.0-12.12","7.0.0-13.13","7.0.0-14.14","7.0.0-15.15","7.0.0-22.22","7.0.0-27.27","7.0.0-28.28","7.0.0-29.29","7.0.0-30.30"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1012.12"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1002.2","6.19.0-1003.3","7.0.0-1001.1","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1010.10"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1006.7"}]}],"versions":["7.0.0-1002.3","7.0.0-1003.4","7.0.0-1005.6"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-31.31.1"}]}],"versions":["6.17.0-1001.2","7.0.0-10.10.3","7.0.0-12.12.1","7.0.0-14.14.1","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1019.19"}]}],"versions":["6.17.0-1003.3","7.0.0-1004.4","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1014.14","7.0.0-1015.15","7.0.0-1016.16","7.0.0-1017.17"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13"}]}],"versions":["6.19.0-1002.2","6.19.0-1003.3","7.0.0-1002.2","7.0.0-1004.4","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14"}]}],"versions":["6.17.0-1003.3","6.17.0-1004.4","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10"],"bundled":551},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13"}]}],"versions":["7.0.0-1005.5","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11"],"bundled":547},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.2"],"bundled":1417},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14~24.04.1"}]}],"versions":["7.0.0-1008.8~24.04.2"],"bundled":1417},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1011.11~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.3"],"bundled":1417},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1018.18~24.04.1"}]}],"versions":["7.0.0-1013.13~24.04.1","7.0.0-1015.15~24.04.1","7.0.0-1016.16~24.04.1"],"bundled":550},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1018.18"}]}],"versions":["7.0.0-1005.5","7.0.0-1006.6","7.0.0-1009.9","7.0.0-1013.13","7.0.0-1015.15","7.0.0-1016.16"],"bundled":550},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia-bos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-2018.18"}]}],"versions":["7.0.0-2012.12","7.0.0-2015.15","7.0.0-2016.16"],"bundled":552},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1036.39"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1031.32","6.8.0-1032.34","6.8.0-1035.38"],"bundled":684},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.7-1.1"}]}],"bundled":351},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.25"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401}],"products":[{"vendor":"linux","product":"linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://git.kernel.org/stable/c/c0fe1118a1471d459f76c3e70ff2abbf784ce6bf","tags":["web"]},{"url":"https://git.kernel.org/stable/c/6825a45f6b8ef76b0ee32649ec3d6e39ca143a18","tags":["web"]},{"url":"https://git.kernel.org/stable/c/27ead8c5418af6bfab711079fecb9414d78d4cae","tags":["web"]},{"url":"https://git.kernel.org/stable/c/3eaec47518e126e6dcd1a48521d740278073f0ec","tags":["web"]},{"url":"https://git.kernel.org/stable/c/550cfb8a81181331d4d0f76ab75ee58a0bf41e3e","tags":["Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/760ef2c579c2609cf17fb1cd5392f64d42d43d33","tags":["Patch","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64388","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-p59x-f8qp-h8m2"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-64388","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64388.json","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-64388","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3316","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64456","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3453","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46113","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63800","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63924","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63992","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63994","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64279","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64296","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64333","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68159","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623477-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230238","tags":["report"]},{"url":"https://bugzilla.suse.com/1235944","tags":["report"]},{"url":"https://bugzilla.suse.com/1247455","tags":["report"]},{"url":"https://bugzilla.suse.com/1250748","tags":["report"]},{"url":"https://bugzilla.suse.com/1251966","tags":["report"]},{"url":"https://bugzilla.suse.com/1252682","tags":["report"]},{"url":"https://bugzilla.suse.com/1254306","tags":["report"]},{"url":"https://bugzilla.suse.com/1255225","tags":["report"]},{"url":"https://bugzilla.suse.com/1255250","tags":["report"]},{"url":"https://bugzilla.suse.com/1256629","tags":["report"]},{"url":"https://bugzilla.suse.com/1256708","tags":["report"]},{"url":"https://bugzilla.suse.com/1257154","tags":["report"]},{"url":"https://bugzilla.suse.com/1258430","tags":["report"]},{"url":"https://bugzilla.suse.com/1258517","tags":["report"]},{"url":"https://bugzilla.suse.com/1260522","tags":["report"]},{"url":"https://bugzilla.suse.com/1261780","tags":["report"]},{"url":"https://bugzilla.suse.com/1261788","tags":["report"]},{"url":"https://bugzilla.suse.com/1262073","tags":["report"]},{"url":"https://bugzilla.suse.com/1263004","tags":["report"]},{"url":"https://bugzilla.suse.com/1263061","tags":["report"]},{"url":"https://bugzilla.suse.com/1263133","tags":["report"]},{"url":"https://bugzilla.suse.com/1264335","tags":["report"]},{"url":"https://bugzilla.suse.com/1264446","tags":["report"]},{"url":"https://bugzilla.suse.com/1264541","tags":["report"]},{"url":"https://bugzilla.suse.com/1264584","tags":["report"]},{"url":"https://bugzilla.suse.com/1264587","tags":["report"]},{"url":"https://bugzilla.suse.com/1264619","tags":["report"]},{"url":"https://bugzilla.suse.com/1264788","tags":["report"]},{"url":"https://bugzilla.suse.com/1265068","tags":["report"]},{"url":"https://bugzilla.suse.com/1265121","tags":["report"]},{"url":"https://bugzilla.suse.com/1265449","tags":["report"]},{"url":"https://bugzilla.suse.com/1265928","tags":["report"]},{"url":"https://bugzilla.suse.com/1266402","tags":["report"]},{"url":"https://bugzilla.suse.com/1266860","tags":["report"]},{"url":"https://bugzilla.suse.com/1266874","tags":["report"]},{"url":"https://bugzilla.suse.com/1266897","tags":["report"]},{"url":"https://bugzilla.suse.com/1267023","tags":["report"]},{"url":"https://bugzilla.suse.com/1267238","tags":["report"]},{"url":"https://bugzilla.suse.com/1267501","tags":["report"]},{"url":"https://bugzilla.suse.com/1267612","tags":["report"]},{"url":"https://bugzilla.suse.com/1268276","tags":["report"]},{"url":"https://bugzilla.suse.com/1268972","tags":["report"]},{"url":"https://bugzilla.suse.com/1268979","tags":["report"]},{"url":"https://bugzilla.suse.com/1268987","tags":["report"]},{"url":"https://bugzilla.suse.com/1269004","tags":["report"]},{"url":"https://bugzilla.suse.com/1269013","tags":["report"]},{"url":"https://bugzilla.suse.com/1269108","tags":["report"]},{"url":"https://bugzilla.suse.com/1269113","tags":["report"]},{"url":"https://bugzilla.suse.com/1269114","tags":["report"]},{"url":"https://bugzilla.suse.com/1269126","tags":["report"]},{"url":"https://bugzilla.suse.com/1269167","tags":["report"]},{"url":"https://bugzilla.suse.com/1269234","tags":["report"]},{"url":"https://bugzilla.suse.com/1269238","tags":["report"]},{"url":"https://bugzilla.suse.com/1269242","tags":["report"]},{"url":"https://bugzilla.suse.com/1269256","tags":["report"]},{"url":"https://bugzilla.suse.com/1269301","tags":["report"]},{"url":"https://bugzilla.suse.com/1269306","tags":["report"]},{"url":"https://bugzilla.suse.com/1269381","tags":["report"]},{"url":"https://bugzilla.suse.com/1269388","tags":["report"]},{"url":"https://bugzilla.suse.com/1269412","tags":["report"]},{"url":"https://bugzilla.suse.com/1269530","tags":["report"]},{"url":"https://bugzilla.suse.com/1269579","tags":["report"]},{"url":"https://bugzilla.suse.com/1269590","tags":["report"]},{"url":"https://bugzilla.suse.com/1269635","tags":["report"]},{"url":"https://bugzilla.suse.com/1269655","tags":["report"]},{"url":"https://bugzilla.suse.com/1269665","tags":["report"]},{"url":"https://bugzilla.suse.com/1269686","tags":["report"]},{"url":"https://bugzilla.suse.com/1269695","tags":["report"]},{"url":"https://bugzilla.suse.com/1269713","tags":["report"]},{"url":"https://bugzilla.suse.com/1269731","tags":["report"]},{"url":"https://bugzilla.suse.com/1269774","tags":["report"]},{"url":"https://bugzilla.suse.com/1269783","tags":["report"]},{"url":"https://bugzilla.suse.com/1269792","tags":["report"]},{"url":"https://bugzilla.suse.com/1269815","tags":["report"]},{"url":"https://bugzilla.suse.com/1269965","tags":["report"]},{"url":"https://bugzilla.suse.com/1269969","tags":["report"]},{"url":"https://bugzilla.suse.com/1269981","tags":["report"]},{"url":"https://bugzilla.suse.com/1269985","tags":["report"]},{"url":"https://bugzilla.suse.com/1270090","tags":["report"]},{"url":"https://bugzilla.suse.com/1270108","tags":["report"]},{"url":"https://bugzilla.suse.com/1270111","tags":["report"]},{"url":"https://bugzilla.suse.com/1270251","tags":["report"]},{"url":"https://bugzilla.suse.com/1271256","tags":["report"]},{"url":"https://bugzilla.suse.com/1271365","tags":["report"]},{"url":"https://bugzilla.suse.com/1271366","tags":["report"]},{"url":"https://bugzilla.suse.com/1271825","tags":["report"]},{"url":"https://bugzilla.suse.com/1271830","tags":["report"]},{"url":"https://bugzilla.suse.com/1272150","tags":["report"]},{"url":"https://bugzilla.suse.com/1272175","tags":["report"]},{"url":"https://bugzilla.suse.com/1272179","tags":["report"]},{"url":"https://bugzilla.suse.com/1272182","tags":["report"]},{"url":"https://bugzilla.suse.com/1272200","tags":["report"]},{"url":"https://bugzilla.suse.com/1272210","tags":["report"]},{"url":"https://bugzilla.suse.com/1272213","tags":["report"]},{"url":"https://bugzilla.suse.com/1272230","tags":["report"]},{"url":"https://bugzilla.suse.com/1272260","tags":["report"]},{"url":"https://bugzilla.suse.com/1272261","tags":["report"]},{"url":"https://bugzilla.suse.com/1272262","tags":["report"]},{"url":"https://bugzilla.suse.com/1272297","tags":["report"]},{"url":"https://bugzilla.suse.com/1272346","tags":["report"]},{"url":"https://bugzilla.suse.com/1272381","tags":["report"]},{"url":"https://bugzilla.suse.com/1272385","tags":["report"]},{"url":"https://bugzilla.suse.com/1272390","tags":["report"]},{"url":"https://bugzilla.suse.com/1272423","tags":["report"]},{"url":"https://bugzilla.suse.com/1272429","tags":["report"]},{"url":"https://bugzilla.suse.com/1272484","tags":["report"]},{"url":"https://bugzilla.suse.com/1272486","tags":["report"]},{"url":"https://bugzilla.suse.com/1272497","tags":["report"]},{"url":"https://bugzilla.suse.com/1272516","tags":["report"]},{"url":"https://bugzilla.suse.com/1272569","tags":["report"]},{"url":"https://bugzilla.suse.com/1272571","tags":["report"]},{"url":"https://bugzilla.suse.com/1272641","tags":["report"]},{"url":"https://bugzilla.suse.com/1272643","tags":["report"]},{"url":"https://bugzilla.suse.com/1272662","tags":["report"]},{"url":"https://bugzilla.suse.com/1272673","tags":["report"]},{"url":"https://bugzilla.suse.com/1272680","tags":["report"]},{"url":"https://bugzilla.suse.com/1272682","tags":["report"]},{"url":"https://bugzilla.suse.com/1272756","tags":["report"]},{"url":"https://bugzilla.suse.com/1272786","tags":["report"]},{"url":"https://bugzilla.suse.com/1272788","tags":["report"]},{"url":"https://bugzilla.suse.com/1272798","tags":["report"]},{"url":"https://bugzilla.suse.com/1272799","tags":["report"]},{"url":"https://bugzilla.suse.com/1272868","tags":["report"]},{"url":"https://bugzilla.suse.com/1272877","tags":["report"]},{"url":"https://bugzilla.suse.com/1272891","tags":["report"]},{"url":"https://bugzilla.suse.com/1272963","tags":["report"]},{"url":"https://bugzilla.suse.com/1272983","tags":["report"]},{"url":"https://bugzilla.suse.com/1273008","tags":["report"]},{"url":"https://bugzilla.suse.com/1273019","tags":["report"]},{"url":"https://bugzilla.suse.com/1273027","tags":["report"]},{"url":"https://bugzilla.suse.com/1273028","tags":["report"]},{"url":"https://bugzilla.suse.com/1273030","tags":["report"]},{"url":"https://bugzilla.suse.com/1273038","tags":["report"]},{"url":"https://bugzilla.suse.com/1273053","tags":["report"]},{"url":"https://bugzilla.suse.com/1273054","tags":["report"]},{"url":"https://bugzilla.suse.com/1273060","tags":["report"]},{"url":"https://bugzilla.suse.com/1273105","tags":["report"]},{"url":"https://bugzilla.suse.com/1273249","tags":["report"]},{"url":"https://bugzilla.suse.com/1273250","tags":["report"]},{"url":"https://bugzilla.suse.com/1273260","tags":["report"]},{"url":"https://bugzilla.suse.com/1273273","tags":["report"]},{"url":"https://bugzilla.suse.com/1273274","tags":["report"]},{"url":"https://bugzilla.suse.com/1273276","tags":["report"]},{"url":"https://bugzilla.suse.com/1273281","tags":["report"]},{"url":"https://bugzilla.suse.com/1273284","tags":["report"]},{"url":"https://bugzilla.suse.com/1273285","tags":["report"]},{"url":"https://bugzilla.suse.com/1273289","tags":["report"]},{"url":"https://bugzilla.suse.com/1273291","tags":["report"]},{"url":"https://bugzilla.suse.com/1273294","tags":["report"]},{"url":"https://bugzilla.suse.com/1273302","tags":["report"]},{"url":"https://bugzilla.suse.com/1273303","tags":["report"]},{"url":"https://bugzilla.suse.com/1273305","tags":["report"]},{"url":"https://bugzilla.suse.com/1273310","tags":["report"]},{"url":"https://bugzilla.suse.com/1273311","tags":["report"]},{"url":"https://bugzilla.suse.com/1273316","tags":["report"]},{"url":"https://bugzilla.suse.com/1273318","tags":["report"]},{"url":"https://bugzilla.suse.com/1273319","tags":["report"]},{"url":"https://bugzilla.suse.com/1273323","tags":["report"]},{"url":"https://bugzilla.suse.com/1273325","tags":["report"]},{"url":"https://bugzilla.suse.com/1273327","tags":["report"]},{"url":"https://bugzilla.suse.com/1273334","tags":["report"]},{"url":"https://bugzilla.suse.com/1273335","tags":["report"]},{"url":"https://bugzilla.suse.com/1273336","tags":["report"]},{"url":"https://bugzilla.suse.com/1273337","tags":["report"]},{"url":"https://bugzilla.suse.com/1273338","tags":["report"]},{"url":"https://bugzilla.suse.com/1273340","tags":["report"]},{"url":"https://bugzilla.suse.com/1273341","tags":["report"]},{"url":"https://bugzilla.suse.com/1273346","tags":["report"]},{"url":"https://bugzilla.suse.com/1273422","tags":["report"]},{"url":"https://bugzilla.suse.com/1273426","tags":["report"]},{"url":"https://bugzilla.suse.com/1273443","tags":["report"]},{"url":"https://bugzilla.suse.com/1273463","tags":["report"]},{"url":"https://bugzilla.suse.com/1273468","tags":["report"]},{"url":"https://bugzilla.suse.com/1273469","tags":["report"]},{"url":"https://bugzilla.suse.com/1273471","tags":["report"]},{"url":"https://bugzilla.suse.com/1273479","tags":["report"]},{"url":"https://bugzilla.suse.com/1273480","tags":["report"]},{"url":"https://bugzilla.suse.com/1273482","tags":["report"]},{"url":"https://bugzilla.suse.com/1273484","tags":["report"]},{"url":"https://bugzilla.suse.com/1273488","tags":["report"]},{"url":"https://bugzilla.suse.com/1273490","tags":["report"]},{"url":"https://bugzilla.suse.com/1273501","tags":["report"]},{"url":"https://bugzilla.suse.com/1273503","tags":["report"]},{"url":"https://bugzilla.suse.com/1273504","tags":["report"]},{"url":"https://bugzilla.suse.com/1273506","tags":["report"]},{"url":"https://bugzilla.suse.com/1273523","tags":["report"]},{"url":"https://bugzilla.suse.com/1273525","tags":["report"]},{"url":"https://bugzilla.suse.com/1273533","tags":["report"]},{"url":"https://bugzilla.suse.com/1273536","tags":["report"]},{"url":"https://bugzilla.suse.com/1273542","tags":["report"]},{"url":"https://bugzilla.suse.com/1273555","tags":["report"]},{"url":"https://bugzilla.suse.com/1273578","tags":["report"]},{"url":"https://bugzilla.suse.com/1273579","tags":["report"]},{"url":"https://bugzilla.suse.com/1273582","tags":["report"]},{"url":"https://bugzilla.suse.com/1273596","tags":["report"]},{"url":"https://bugzilla.suse.com/1273597","tags":["report"]},{"url":"https://bugzilla.suse.com/1273598","tags":["report"]},{"url":"https://bugzilla.suse.com/1273600","tags":["report"]},{"url":"https://bugzilla.suse.com/1273601","tags":["report"]},{"url":"https://bugzilla.suse.com/1273602","tags":["report"]},{"url":"https://bugzilla.suse.com/1273603","tags":["report"]},{"url":"https://bugzilla.suse.com/1273682","tags":["report"]},{"url":"https://bugzilla.suse.com/1273734","tags":["report"]},{"url":"https://bugzilla.suse.com/1273738","tags":["report"]},{"url":"https://bugzilla.suse.com/1273739","tags":["report"]},{"url":"https://bugzilla.suse.com/1273741","tags":["report"]},{"url":"https://bugzilla.suse.com/1273742","tags":["report"]},{"url":"https://bugzilla.suse.com/1273743","tags":["report"]},{"url":"https://bugzilla.suse.com/1273745","tags":["report"]},{"url":"https://bugzilla.suse.com/1273748","tags":["report"]},{"url":"https://bugzilla.suse.com/1273749","tags":["report"]},{"url":"https://bugzilla.suse.com/1273755","tags":["report"]},{"url":"https://bugzilla.suse.com/1273762","tags":["report"]},{"url":"https://bugzilla.suse.com/1273765","tags":["report"]},{"url":"https://bugzilla.suse.com/1273766","tags":["report"]},{"url":"https://bugzilla.suse.com/1273769","tags":["report"]},{"url":"https://bugzilla.suse.com/1273774","tags":["report"]},{"url":"https://bugzilla.suse.com/1273778","tags":["report"]},{"url":"https://bugzilla.suse.com/1273780","tags":["report"]},{"url":"https://bugzilla.suse.com/1273790","tags":["report"]},{"url":"https://bugzilla.suse.com/1273796","tags":["report"]},{"url":"https://bugzilla.suse.com/1273804","tags":["report"]},{"url":"https://bugzilla.suse.com/1273810","tags":["report"]},{"url":"https://bugzilla.suse.com/1273811","tags":["report"]},{"url":"https://bugzilla.suse.com/1273813","tags":["report"]},{"url":"https://bugzilla.suse.com/1273817","tags":["report"]},{"url":"https://bugzilla.suse.com/1273822","tags":["report"]},{"url":"https://bugzilla.suse.com/1273824","tags":["report"]},{"url":"https://bugzilla.suse.com/1273831","tags":["report"]},{"url":"https://bugzilla.suse.com/1273832","tags":["report"]},{"url":"https://bugzilla.suse.com/1273834","tags":["report"]},{"url":"https://bugzilla.suse.com/1273838","tags":["report"]},{"url":"https://bugzilla.suse.com/1273844","tags":["report"]},{"url":"https://bugzilla.suse.com/1273849","tags":["report"]},{"url":"https://bugzilla.suse.com/1273860","tags":["report"]},{"url":"https://bugzilla.suse.com/1273862","tags":["report"]},{"url":"https://bugzilla.suse.com/1273867","tags":["report"]},{"url":"https://bugzilla.suse.com/1273868","tags":["report"]},{"url":"https://bugzilla.suse.com/1273869","tags":["report"]},{"url":"https://bugzilla.suse.com/1273872","tags":["report"]},{"url":"https://bugzilla.suse.com/1273876","tags":["report"]},{"url":"https://bugzilla.suse.com/1273877","tags":["report"]},{"url":"https://bugzilla.suse.com/1273880","tags":["report"]},{"url":"https://bugzilla.suse.com/1273882","tags":["report"]},{"url":"https://bugzilla.suse.com/1273890","tags":["report"]},{"url":"https://bugzilla.suse.com/1273891","tags":["report"]},{"url":"https://bugzilla.suse.com/1273892","tags":["report"]},{"url":"https://bugzilla.suse.com/1273895","tags":["report"]},{"url":"https://bugzilla.suse.com/1273896","tags":["report"]},{"url":"https://bugzilla.suse.com/1273903","tags":["report"]},{"url":"https://bugzilla.suse.com/1273905","tags":["report"]},{"url":"https://bugzilla.suse.com/1273930","tags":["report"]},{"url":"https://bugzilla.suse.com/1273933","tags":["report"]},{"url":"https://bugzilla.suse.com/1273934","tags":["report"]},{"url":"https://bugzilla.suse.com/1273935","tags":["report"]},{"url":"https://bugzilla.suse.com/1273936","tags":["report"]},{"url":"https://bugzilla.suse.com/1273939","tags":["report"]},{"url":"https://bugzilla.suse.com/1273940","tags":["report"]},{"url":"https://bugzilla.suse.com/1273941","tags":["report"]},{"url":"https://bugzilla.suse.com/1273942","tags":["report"]},{"url":"https://bugzilla.suse.com/1273944","tags":["report"]},{"url":"https://bugzilla.suse.com/1273945","tags":["report"]},{"url":"https://bugzilla.suse.com/1273946","tags":["report"]},{"url":"https://bugzilla.suse.com/1273956","tags":["report"]},{"url":"https://bugzilla.suse.com/1273957","tags":["report"]},{"url":"https://bugzilla.suse.com/1273958","tags":["report"]},{"url":"https://bugzilla.suse.com/1273966","tags":["report"]},{"url":"https://bugzilla.suse.com/1273967","tags":["report"]},{"url":"https://bugzilla.suse.com/1273968","tags":["report"]},{"url":"https://bugzilla.suse.com/1273972","tags":["report"]},{"url":"https://bugzilla.suse.com/1273974","tags":["report"]},{"url":"https://bugzilla.suse.com/1273975","tags":["report"]},{"url":"https://bugzilla.suse.com/1273977","tags":["report"]},{"url":"https://bugzilla.suse.com/1273982","tags":["report"]},{"url":"https://bugzilla.suse.com/1273988","tags":["report"]},{"url":"https://bugzilla.suse.com/1273990","tags":["report"]},{"url":"https://bugzilla.suse.com/1273991","tags":["report"]},{"url":"https://bugzilla.suse.com/1273995","tags":["report"]},{"url":"https://bugzilla.suse.com/1274001","tags":["report"]},{"url":"https://bugzilla.suse.com/1274003","tags":["report"]},{"url":"https://bugzilla.suse.com/1274006","tags":["report"]},{"url":"https://bugzilla.suse.com/1274011","tags":["report"]},{"url":"https://bugzilla.suse.com/1274012","tags":["report"]},{"url":"https://bugzilla.suse.com/1274014","tags":["report"]},{"url":"https://bugzilla.suse.com/1274017","tags":["report"]},{"url":"https://bugzilla.suse.com/1274019","tags":["report"]},{"url":"https://bugzilla.suse.com/1274020","tags":["report"]},{"url":"https://bugzilla.suse.com/1274026","tags":["report"]},{"url":"https://bugzilla.suse.com/1274028","tags":["report"]},{"url":"https://bugzilla.suse.com/1274030","tags":["report"]},{"url":"https://bugzilla.suse.com/1274031","tags":["report"]},{"url":"https://bugzilla.suse.com/1274035","tags":["report"]},{"url":"https://bugzilla.suse.com/1274040","tags":["report"]},{"url":"https://bugzilla.suse.com/1274041","tags":["report"]},{"url":"https://bugzilla.suse.com/1274057","tags":["report"]},{"url":"https://bugzilla.suse.com/1274058","tags":["report"]},{"url":"https://bugzilla.suse.com/1274061","tags":["report"]},{"url":"https://bugzilla.suse.com/1274063","tags":["report"]},{"url":"https://bugzilla.suse.com/1274065","tags":["report"]},{"url":"https://bugzilla.suse.com/1274067","tags":["report"]},{"url":"https://bugzilla.suse.com/1274075","tags":["report"]},{"url":"https://bugzilla.suse.com/1274076","tags":["report"]},{"url":"https://bugzilla.suse.com/1274077","tags":["report"]},{"url":"https://bugzilla.suse.com/1274078","tags":["report"]},{"url":"https://bugzilla.suse.com/1274208","tags":["report"]},{"url":"https://bugzilla.suse.com/1274226","tags":["report"]},{"url":"https://bugzilla.suse.com/1274239","tags":["report"]},{"url":"https://bugzilla.suse.com/1274243","tags":["report"]},{"url":"https://bugzilla.suse.com/1274258","tags":["report"]},{"url":"https://bugzilla.suse.com/1274265","tags":["report"]},{"url":"https://bugzilla.suse.com/1274274","tags":["report"]},{"url":"https://bugzilla.suse.com/1274277","tags":["report"]},{"url":"https://bugzilla.suse.com/1274278","tags":["report"]},{"url":"https://bugzilla.suse.com/1274281","tags":["report"]},{"url":"https://bugzilla.suse.com/1274283","tags":["report"]},{"url":"https://bugzilla.suse.com/1274286","tags":["report"]},{"url":"https://bugzilla.suse.com/1274290","tags":["report"]},{"url":"https://bugzilla.suse.com/1274294","tags":["report"]},{"url":"https://bugzilla.suse.com/1274296","tags":["report"]},{"url":"https://bugzilla.suse.com/1274297","tags":["report"]},{"url":"https://bugzilla.suse.com/1274298","tags":["report"]},{"url":"https://bugzilla.suse.com/1274314","tags":["report"]},{"url":"https://bugzilla.suse.com/1274321","tags":["report"]},{"url":"https://bugzilla.suse.com/1274491","tags":["report"]},{"url":"https://bugzilla.suse.com/1274497","tags":["report"]},{"url":"https://bugzilla.suse.com/1274539","tags":["report"]},{"url":"https://bugzilla.suse.com/1274541","tags":["report"]},{"url":"https://bugzilla.suse.com/1274543","tags":["report"]},{"url":"https://bugzilla.suse.com/1274545","tags":["report"]},{"url":"https://bugzilla.suse.com/1274547","tags":["report"]},{"url":"https://bugzilla.suse.com/1274550","tags":["report"]},{"url":"https://bugzilla.suse.com/1274573","tags":["report"]},{"url":"https://bugzilla.suse.com/1274578","tags":["report"]},{"url":"https://bugzilla.suse.com/1274580","tags":["report"]},{"url":"https://bugzilla.suse.com/1274581","tags":["report"]},{"url":"https://bugzilla.suse.com/1274620","tags":["report"]},{"url":"https://bugzilla.suse.com/1274622","tags":["report"]},{"url":"https://bugzilla.suse.com/1274624","tags":["report"]},{"url":"https://bugzilla.suse.com/1274629","tags":["report"]},{"url":"https://bugzilla.suse.com/1274632","tags":["report"]},{"url":"https://bugzilla.suse.com/1274636","tags":["report"]},{"url":"https://bugzilla.suse.com/1274639","tags":["report"]},{"url":"https://bugzilla.suse.com/1274640","tags":["report"]},{"url":"https://bugzilla.suse.com/1274642","tags":["report"]},{"url":"https://bugzilla.suse.com/1274644","tags":["report"]},{"url":"https://bugzilla.suse.com/1274645","tags":["report"]},{"url":"https://bugzilla.suse.com/1274646","tags":["report"]},{"url":"https://bugzilla.suse.com/1274649","tags":["report"]},{"url":"https://bugzilla.suse.com/1274650","tags":["report"]},{"url":"https://bugzilla.suse.com/1274651","tags":["report"]},{"url":"https://bugzilla.suse.com/1274656","tags":["report"]},{"url":"https://bugzilla.suse.com/1274659","tags":["report"]},{"url":"https://bugzilla.suse.com/1274662","tags":["report"]},{"url":"https://bugzilla.suse.com/1274663","tags":["report"]},{"url":"https://bugzilla.suse.com/1274665","tags":["report"]},{"url":"https://bugzilla.suse.com/1274667","tags":["report"]},{"url":"https://bugzilla.suse.com/1274670","tags":["report"]},{"url":"https://bugzilla.suse.com/1274675","tags":["report"]},{"url":"https://bugzilla.suse.com/1274677","tags":["report"]},{"url":"https://bugzilla.suse.com/1274678","tags":["report"]},{"url":"https://bugzilla.suse.com/1274679","tags":["report"]},{"url":"https://bugzilla.suse.com/1274681","tags":["report"]},{"url":"https://bugzilla.suse.com/1274682","tags":["report"]},{"url":"https://bugzilla.suse.com/1274690","tags":["report"]},{"url":"https://bugzilla.suse.com/1274694","tags":["report"]},{"url":"https://bugzilla.suse.com/1274696","tags":["report"]},{"url":"https://bugzilla.suse.com/1274698","tags":["report"]},{"url":"https://bugzilla.suse.com/1274699","tags":["report"]},{"url":"https://bugzilla.suse.com/1274700","tags":["report"]},{"url":"https://bugzilla.suse.com/1274702","tags":["report"]},{"url":"https://bugzilla.suse.com/1274703","tags":["report"]},{"url":"https://bugzilla.suse.com/1274705","tags":["report"]},{"url":"https://bugzilla.suse.com/1274706","tags":["report"]},{"url":"https://bugzilla.suse.com/1274709","tags":["report"]},{"url":"https://bugzilla.suse.com/1274710","tags":["report"]},{"url":"https://bugzilla.suse.com/1274713","tags":["report"]},{"url":"https://bugzilla.suse.com/1274716","tags":["report"]},{"url":"https://bugzilla.suse.com/1274721","tags":["report"]},{"url":"https://bugzilla.suse.com/1274725","tags":["report"]},{"url":"https://bugzilla.suse.com/1274737","tags":["report"]},{"url":"https://bugzilla.suse.com/1274738","tags":["report"]},{"url":"https://bugzilla.suse.com/1274749","tags":["report"]},{"url":"https://bugzilla.suse.com/1274752","tags":["report"]},{"url":"https://bugzilla.suse.com/1274753","tags":["report"]},{"url":"https://bugzilla.suse.com/1274754","tags":["report"]},{"url":"https://bugzilla.suse.com/1274755","tags":["report"]},{"url":"https://bugzilla.suse.com/1274756","tags":["report"]},{"url":"https://bugzilla.suse.com/1274764","tags":["report"]},{"url":"https://bugzilla.suse.com/1274768","tags":["report"]},{"url":"https://bugzilla.suse.com/1274770","tags":["report"]},{"url":"https://bugzilla.suse.com/1274787","tags":["report"]},{"url":"https://bugzilla.suse.com/1274800","tags":["report"]},{"url":"https://bugzilla.suse.com/1274801","tags":["report"]},{"url":"https://bugzilla.suse.com/1274802","tags":["report"]},{"url":"https://bugzilla.suse.com/1274804","tags":["report"]},{"url":"https://bugzilla.suse.com/1274805","tags":["report"]},{"url":"https://bugzilla.suse.com/1274807","tags":["report"]},{"url":"https://bugzilla.suse.com/1274808","tags":["report"]},{"url":"https://bugzilla.suse.com/1274811","tags":["report"]},{"url":"https://bugzilla.suse.com/1274813","tags":["report"]},{"url":"https://bugzilla.suse.com/1274814","tags":["report"]},{"url":"https://bugzilla.suse.com/1274831","tags":["report"]},{"url":"https://bugzilla.suse.com/1274834","tags":["report"]},{"url":"https://bugzilla.suse.com/1274847","tags":["report"]},{"url":"https://bugzilla.suse.com/1274853","tags":["report"]},{"url":"https://bugzilla.suse.com/1274868","tags":["report"]},{"url":"https://bugzilla.suse.com/1274869","tags":["report"]},{"url":"https://bugzilla.suse.com/1274872","tags":["report"]},{"url":"https://bugzilla.suse.com/1274873","tags":["report"]},{"url":"https://bugzilla.suse.com/1274874","tags":["report"]},{"url":"https://bugzilla.suse.com/1274876","tags":["report"]},{"url":"https://bugzilla.suse.com/1274879","tags":["report"]},{"url":"https://bugzilla.suse.com/1274881","tags":["report"]},{"url":"https://bugzilla.suse.com/1274883","tags":["report"]},{"url":"https://bugzilla.suse.com/1274886","tags":["report"]},{"url":"https://bugzilla.suse.com/1274888","tags":["report"]},{"url":"https://bugzilla.suse.com/1274891","tags":["report"]},{"url":"https://bugzilla.suse.com/1274892","tags":["report"]},{"url":"https://bugzilla.suse.com/1274893","tags":["report"]},{"url":"https://bugzilla.suse.com/1274894","tags":["report"]},{"url":"https://bugzilla.suse.com/1274896","tags":["report"]},{"url":"https://bugzilla.suse.com/1274897","tags":["report"]},{"url":"https://bugzilla.suse.com/1274898","tags":["report"]},{"url":"https://bugzilla.suse.com/1274899","tags":["report"]},{"url":"https://bugzilla.suse.com/1274901","tags":["report"]},{"url":"https://bugzilla.suse.com/1274902","tags":["report"]},{"url":"https://bugzilla.suse.com/1274905","tags":["report"]},{"url":"https://bugzilla.suse.com/1274907","tags":["report"]},{"url":"https://bugzilla.suse.com/1274908","tags":["report"]},{"url":"https://bugzilla.suse.com/1274913","tags":["report"]},{"url":"https://bugzilla.suse.com/1274914","tags":["report"]},{"url":"https://bugzilla.suse.com/1274920","tags":["report"]},{"url":"https://bugzilla.suse.com/1274921","tags":["report"]},{"url":"https://bugzilla.suse.com/1274924","tags":["report"]},{"url":"https://bugzilla.suse.com/1274925","tags":["report"]},{"url":"https://bugzilla.suse.com/1274929","tags":["report"]},{"url":"https://bugzilla.suse.com/1274930","tags":["report"]},{"url":"https://bugzilla.suse.com/1274933","tags":["report"]},{"url":"https://bugzilla.suse.com/1274934","tags":["report"]},{"url":"https://bugzilla.suse.com/1274935","tags":["report"]},{"url":"https://bugzilla.suse.com/1274941","tags":["report"]},{"url":"https://bugzilla.suse.com/1274945","tags":["report"]},{"url":"https://bugzilla.suse.com/1274947","tags":["report"]},{"url":"https://bugzilla.suse.com/1274951","tags":["report"]},{"url":"https://bugzilla.suse.com/1274953","tags":["report"]},{"url":"https://bugzilla.suse.com/1274958","tags":["report"]},{"url":"https://bugzilla.suse.com/1274968","tags":["report"]},{"url":"https://bugzilla.suse.com/1274981","tags":["report"]},{"url":"https://bugzilla.suse.com/1275040","tags":["report"]},{"url":"https://bugzilla.suse.com/1275069","tags":["report"]},{"url":"https://bugzilla.suse.com/1275071","tags":["report"]},{"url":"https://bugzilla.suse.com/1275073","tags":["report"]},{"url":"https://bugzilla.suse.com/1275076","tags":["report"]},{"url":"https://bugzilla.suse.com/1275080","tags":["report"]},{"url":"https://bugzilla.suse.com/1275083","tags":["report"]},{"url":"https://bugzilla.suse.com/1275088","tags":["report"]},{"url":"https://bugzilla.suse.com/1275091","tags":["report"]},{"url":"https://bugzilla.suse.com/1275125","tags":["report"]},{"url":"https://bugzilla.suse.com/1275126","tags":["report"]},{"url":"https://bugzilla.suse.com/1275131","tags":["report"]},{"url":"https://bugzilla.suse.com/1275132","tags":["report"]},{"url":"https://bugzilla.suse.com/1275150","tags":["report"]},{"url":"https://bugzilla.suse.com/1275152","tags":["report"]},{"url":"https://bugzilla.suse.com/1275154","tags":["report"]},{"url":"https://bugzilla.suse.com/1275155","tags":["report"]},{"url":"https://bugzilla.suse.com/1275157","tags":["report"]},{"url":"https://bugzilla.suse.com/1275158","tags":["report"]},{"url":"https://bugzilla.suse.com/1275161","tags":["report"]},{"url":"https://bugzilla.suse.com/1275163","tags":["report"]},{"url":"https://bugzilla.suse.com/1275164","tags":["report"]},{"url":"https://bugzilla.suse.com/1275169","tags":["report"]},{"url":"https://bugzilla.suse.com/1275173","tags":["report"]},{"url":"https://bugzilla.suse.com/1275176","tags":["report"]},{"url":"https://bugzilla.suse.com/1275185","tags":["report"]},{"url":"https://bugzilla.suse.com/1275190","tags":["report"]},{"url":"https://bugzilla.suse.com/1275236","tags":["report"]},{"url":"https://bugzilla.suse.com/1275237","tags":["report"]},{"url":"https://bugzilla.suse.com/1275239","tags":["report"]},{"url":"https://bugzilla.suse.com/1275294","tags":["report"]},{"url":"https://bugzilla.suse.com/1275301","tags":["report"]},{"url":"https://bugzilla.suse.com/1275303","tags":["report"]},{"url":"https://bugzilla.suse.com/1275304","tags":["report"]},{"url":"https://bugzilla.suse.com/1275305","tags":["report"]},{"url":"https://bugzilla.suse.com/1275306","tags":["report"]},{"url":"https://bugzilla.suse.com/1275307","tags":["report"]},{"url":"https://bugzilla.suse.com/1275470","tags":["report"]},{"url":"https://bugzilla.suse.com/1275472","tags":["report"]},{"url":"https://bugzilla.suse.com/1275474","tags":["report"]},{"url":"https://bugzilla.suse.com/1275479","tags":["report"]},{"url":"https://bugzilla.suse.com/1275483","tags":["report"]},{"url":"https://bugzilla.suse.com/1275486","tags":["report"]},{"url":"https://bugzilla.suse.com/1275487","tags":["report"]},{"url":"https://bugzilla.suse.com/1275506","tags":["report"]},{"url":"https://bugzilla.suse.com/1275509","tags":["report"]},{"url":"https://bugzilla.suse.com/1275511","tags":["report"]},{"url":"https://bugzilla.suse.com/1275517","tags":["report"]},{"url":"https://bugzilla.suse.com/1275528","tags":["report"]},{"url":"https://bugzilla.suse.com/1275535","tags":["report"]},{"url":"https://bugzilla.suse.com/1275540","tags":["report"]},{"url":"https://bugzilla.suse.com/1275553","tags":["report"]},{"url":"https://bugzilla.suse.com/1275555","tags":["report"]},{"url":"https://bugzilla.suse.com/1275561","tags":["report"]},{"url":"https://bugzilla.suse.com/1275566","tags":["report"]},{"url":"https://bugzilla.suse.com/1275569","tags":["report"]},{"url":"https://bugzilla.suse.com/1275574","tags":["report"]},{"url":"https://bugzilla.suse.com/1275578","tags":["report"]},{"url":"https://bugzilla.suse.com/1275582","tags":["report"]},{"url":"https://bugzilla.suse.com/1275583","tags":["report"]},{"url":"https://bugzilla.suse.com/1275584","tags":["report"]},{"url":"https://bugzilla.suse.com/1275591","tags":["report"]},{"url":"https://bugzilla.suse.com/1275595","tags":["report"]},{"url":"https://bugzilla.suse.com/1275633","tags":["report"]},{"url":"https://bugzilla.suse.com/1275636","tags":["report"]},{"url":"https://bugzilla.suse.com/1275650","tags":["report"]},{"url":"https://bugzilla.suse.com/1275659","tags":["report"]},{"url":"https://bugzilla.suse.com/1275665","tags":["report"]},{"url":"https://bugzilla.suse.com/1275669","tags":["report"]},{"url":"https://bugzilla.suse.com/1275687","tags":["report"]},{"url":"https://bugzilla.suse.com/1275688","tags":["report"]},{"url":"https://bugzilla.suse.com/1275695","tags":["report"]},{"url":"https://bugzilla.suse.com/1275696","tags":["report"]},{"url":"https://bugzilla.suse.com/1275704","tags":["report"]},{"url":"https://bugzilla.suse.com/1275782","tags":["report"]},{"url":"https://bugzilla.suse.com/1275784","tags":["report"]},{"url":"https://bugzilla.suse.com/1275787","tags":["report"]},{"url":"https://bugzilla.suse.com/1275788","tags":["report"]},{"url":"https://bugzilla.suse.com/1275790","tags":["report"]},{"url":"https://bugzilla.suse.com/1275797","tags":["report"]},{"url":"https://bugzilla.suse.com/1275798","tags":["report"]},{"url":"https://bugzilla.suse.com/1275805","tags":["report"]},{"url":"https://bugzilla.suse.com/1275817","tags":["report"]},{"url":"https://bugzilla.suse.com/1275818","tags":["report"]},{"url":"https://bugzilla.suse.com/1275819","tags":["report"]},{"url":"https://bugzilla.suse.com/1275820","tags":["report"]},{"url":"https://bugzilla.suse.com/1275821","tags":["report"]},{"url":"https://bugzilla.suse.com/1275827","tags":["report"]},{"url":"https://bugzilla.suse.com/1275864","tags":["report"]},{"url":"https://bugzilla.suse.com/1275867","tags":["report"]},{"url":"https://bugzilla.suse.com/1275869","tags":["report"]},{"url":"https://bugzilla.suse.com/1275870","tags":["report"]},{"url":"https://bugzilla.suse.com/1275871","tags":["report"]},{"url":"https://bugzilla.suse.com/1275872","tags":["report"]},{"url":"https://bugzilla.suse.com/1275886","tags":["report"]},{"url":"https://bugzilla.suse.com/1275905","tags":["report"]},{"url":"https://bugzilla.suse.com/1275923","tags":["report"]},{"url":"https://bugzilla.suse.com/1275925","tags":["report"]},{"url":"https://bugzilla.suse.com/1275946","tags":["report"]},{"url":"https://bugzilla.suse.com/1275950","tags":["report"]},{"url":"https://bugzilla.suse.com/1275954","tags":["report"]},{"url":"https://bugzilla.suse.com/1275970","tags":["report"]},{"url":"https://bugzilla.suse.com/1275973","tags":["report"]},{"url":"https://bugzilla.suse.com/1275975","tags":["report"]},{"url":"https://bugzilla.suse.com/1275976","tags":["report"]},{"url":"https://bugzilla.suse.com/1276029","tags":["report"]},{"url":"https://bugzilla.suse.com/1276257","tags":["report"]},{"url":"https://bugzilla.suse.com/1276263","tags":["report"]},{"url":"https://bugzilla.suse.com/1276270","tags":["report"]},{"url":"https://bugzilla.suse.com/1276273","tags":["report"]},{"url":"https://bugzilla.suse.com/1276277","tags":["report"]},{"url":"https://bugzilla.suse.com/1276335","tags":["report"]},{"url":"https://bugzilla.suse.com/1276346","tags":["report"]},{"url":"https://bugzilla.suse.com/1276350","tags":["report"]},{"url":"https://bugzilla.suse.com/1276355","tags":["report"]},{"url":"https://bugzilla.suse.com/1276446","tags":["report"]},{"url":"https://bugzilla.suse.com/1276452","tags":["report"]},{"url":"https://bugzilla.suse.com/1276500","tags":["report"]},{"url":"https://bugzilla.suse.com/1276507","tags":["report"]},{"url":"https://bugzilla.suse.com/1276542","tags":["report"]},{"url":"https://bugzilla.suse.com/1276546","tags":["report"]},{"url":"https://bugzilla.suse.com/1276551","tags":["report"]},{"url":"https://bugzilla.suse.com/1276561","tags":["report"]},{"url":"https://bugzilla.suse.com/1276569","tags":["report"]},{"url":"https://bugzilla.suse.com/1276665","tags":["report"]},{"url":"https://bugzilla.suse.com/1276864","tags":["report"]},{"url":"https://bugzilla.suse.com/1276927","tags":["report"]},{"url":"https://bugzilla.suse.com/1276931","tags":["report"]},{"url":"https://bugzilla.suse.com/1276937","tags":["report"]},{"url":"https://bugzilla.suse.com/1276941","tags":["report"]},{"url":"https://bugzilla.suse.com/1276943","tags":["report"]},{"url":"https://bugzilla.suse.com/1276961","tags":["report"]},{"url":"https://bugzilla.suse.com/1277022","tags":["report"]},{"url":"https://bugzilla.suse.com/1277034","tags":["report"]},{"url":"https://bugzilla.suse.com/1277037","tags":["report"]},{"url":"https://bugzilla.suse.com/1277047","tags":["report"]},{"url":"https://bugzilla.suse.com/1277054","tags":["report"]},{"url":"https://bugzilla.suse.com/1277057","tags":["report"]},{"url":"https://bugzilla.suse.com/1277059","tags":["report"]},{"url":"https://bugzilla.suse.com/1277064","tags":["report"]},{"url":"https://bugzilla.suse.com/1277066","tags":["report"]},{"url":"https://bugzilla.suse.com/1277069","tags":["report"]},{"url":"https://bugzilla.suse.com/1277073","tags":["report"]},{"url":"https://bugzilla.suse.com/1277077","tags":["report"]},{"url":"https://bugzilla.suse.com/1277095","tags":["report"]},{"url":"https://bugzilla.suse.com/1277155","tags":["report"]},{"url":"https://bugzilla.suse.com/1277159","tags":["report"]},{"url":"https://bugzilla.suse.com/1277160","tags":["report"]},{"url":"https://bugzilla.suse.com/1277202","tags":["report"]},{"url":"https://bugzilla.suse.com/1277204","tags":["report"]},{"url":"https://bugzilla.suse.com/1277275","tags":["report"]},{"url":"https://bugzilla.suse.com/1277285","tags":["report"]},{"url":"https://bugzilla.suse.com/1277391","tags":["report"]},{"url":"https://bugzilla.suse.com/1277408","tags":["report"]},{"url":"https://bugzilla.suse.com/1277516","tags":["report"]},{"url":"https://bugzilla.suse.com/1277523","tags":["report"]},{"url":"https://bugzilla.suse.com/1277551","tags":["report"]},{"url":"https://bugzilla.suse.com/1277625","tags":["report"]},{"url":"https://bugzilla.suse.com/1277660","tags":["report"]},{"url":"https://bugzilla.suse.com/1277678","tags":["report"]},{"url":"https://bugzilla.suse.com/1277688","tags":["report"]},{"url":"https://bugzilla.suse.com/1277775","tags":["report"]},{"url":"https://bugzilla.suse.com/1277776","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-57841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-39964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80654","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623481-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623528-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623529-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624179-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253340","tags":["report"]},{"url":"https://bugzilla.suse.com/1258335","tags":["report"]},{"url":"https://bugzilla.suse.com/1260474","tags":["report"]},{"url":"https://bugzilla.suse.com/1261564","tags":["report"]},{"url":"https://bugzilla.suse.com/1261816","tags":["report"]},{"url":"https://bugzilla.suse.com/1264330","tags":["report"]},{"url":"https://bugzilla.suse.com/1264607","tags":["report"]},{"url":"https://bugzilla.suse.com/1264747","tags":["report"]},{"url":"https://bugzilla.suse.com/1266410","tags":["report"]},{"url":"https://bugzilla.suse.com/1266848","tags":["report"]},{"url":"https://bugzilla.suse.com/1267464","tags":["report"]},{"url":"https://bugzilla.suse.com/1267672","tags":["report"]},{"url":"https://bugzilla.suse.com/1271817","tags":["report"]},{"url":"https://bugzilla.suse.com/1271901","tags":["report"]},{"url":"https://bugzilla.suse.com/1271950","tags":["report"]},{"url":"https://bugzilla.suse.com/1272145","tags":["report"]},{"url":"https://bugzilla.suse.com/1272215","tags":["report"]},{"url":"https://bugzilla.suse.com/1272347","tags":["report"]},{"url":"https://bugzilla.suse.com/1272388","tags":["report"]},{"url":"https://bugzilla.suse.com/1272473","tags":["report"]},{"url":"https://bugzilla.suse.com/1272802","tags":["report"]},{"url":"https://bugzilla.suse.com/1272803","tags":["report"]},{"url":"https://bugzilla.suse.com/1272890","tags":["report"]},{"url":"https://bugzilla.suse.com/1273040","tags":["report"]},{"url":"https://bugzilla.suse.com/1273059","tags":["report"]},{"url":"https://bugzilla.suse.com/1273116","tags":["report"]},{"url":"https://bugzilla.suse.com/1273258","tags":["report"]},{"url":"https://bugzilla.suse.com/1273275","tags":["report"]},{"url":"https://bugzilla.suse.com/1273290","tags":["report"]},{"url":"https://bugzilla.suse.com/1273297","tags":["report"]},{"url":"https://bugzilla.suse.com/1273320","tags":["report"]},{"url":"https://bugzilla.suse.com/1273491","tags":["report"]},{"url":"https://bugzilla.suse.com/1273512","tags":["report"]},{"url":"https://bugzilla.suse.com/1273784","tags":["report"]},{"url":"https://bugzilla.suse.com/1273879","tags":["report"]},{"url":"https://bugzilla.suse.com/1273889","tags":["report"]},{"url":"https://bugzilla.suse.com/1273938","tags":["report"]},{"url":"https://bugzilla.suse.com/1273970","tags":["report"]},{"url":"https://bugzilla.suse.com/1273976","tags":["report"]},{"url":"https://bugzilla.suse.com/1274037","tags":["report"]},{"url":"https://bugzilla.suse.com/1274245","tags":["report"]},{"url":"https://bugzilla.suse.com/1274316","tags":["report"]},{"url":"https://bugzilla.suse.com/1274319","tags":["report"]},{"url":"https://bugzilla.suse.com/1274538","tags":["report"]},{"url":"https://bugzilla.suse.com/1274776","tags":["report"]},{"url":"https://bugzilla.suse.com/1274818","tags":["report"]},{"url":"https://bugzilla.suse.com/1274824","tags":["report"]},{"url":"https://bugzilla.suse.com/1274836","tags":["report"]},{"url":"https://bugzilla.suse.com/1274890","tags":["report"]},{"url":"https://bugzilla.suse.com/1274912","tags":["report"]},{"url":"https://bugzilla.suse.com/1275137","tags":["report"]},{"url":"https://bugzilla.suse.com/1275142","tags":["report"]},{"url":"https://bugzilla.suse.com/1275170","tags":["report"]},{"url":"https://bugzilla.suse.com/1275495","tags":["report"]},{"url":"https://bugzilla.suse.com/1275543","tags":["report"]},{"url":"https://bugzilla.suse.com/1275545","tags":["report"]},{"url":"https://bugzilla.suse.com/1275549","tags":["report"]},{"url":"https://bugzilla.suse.com/1275559","tags":["report"]},{"url":"https://bugzilla.suse.com/1275567","tags":["report"]},{"url":"https://bugzilla.suse.com/1275682","tags":["report"]},{"url":"https://bugzilla.suse.com/1275740","tags":["report"]},{"url":"https://bugzilla.suse.com/1275924","tags":["report"]},{"url":"https://bugzilla.suse.com/1275953","tags":["report"]},{"url":"https://bugzilla.suse.com/1275972","tags":["report"]},{"url":"https://bugzilla.suse.com/1275977","tags":["report"]},{"url":"https://bugzilla.suse.com/1276007","tags":["report"]},{"url":"https://bugzilla.suse.com/1276009","tags":["report"]},{"url":"https://bugzilla.suse.com/1276262","tags":["report"]},{"url":"https://bugzilla.suse.com/1276287","tags":["report"]},{"url":"https://bugzilla.suse.com/1276295","tags":["report"]},{"url":"https://bugzilla.suse.com/1276337","tags":["report"]},{"url":"https://bugzilla.suse.com/1276338","tags":["report"]},{"url":"https://bugzilla.suse.com/1276340","tags":["report"]},{"url":"https://bugzilla.suse.com/1276345","tags":["report"]},{"url":"https://bugzilla.suse.com/1276347","tags":["report"]},{"url":"https://bugzilla.suse.com/1276349","tags":["report"]},{"url":"https://bugzilla.suse.com/1276352","tags":["report"]},{"url":"https://bugzilla.suse.com/1276353","tags":["report"]},{"url":"https://bugzilla.suse.com/1276388","tags":["report"]},{"url":"https://bugzilla.suse.com/1276460","tags":["report"]},{"url":"https://bugzilla.suse.com/1276461","tags":["report"]},{"url":"https://bugzilla.suse.com/1276462","tags":["report"]},{"url":"https://bugzilla.suse.com/1276474","tags":["report"]},{"url":"https://bugzilla.suse.com/1276475","tags":["report"]},{"url":"https://bugzilla.suse.com/1276504","tags":["report"]},{"url":"https://bugzilla.suse.com/1276508","tags":["report"]},{"url":"https://bugzilla.suse.com/1276519","tags":["report"]},{"url":"https://bugzilla.suse.com/1276532","tags":["report"]},{"url":"https://bugzilla.suse.com/1276535","tags":["report"]},{"url":"https://bugzilla.suse.com/1276538","tags":["report"]},{"url":"https://bugzilla.suse.com/1276563","tags":["report"]},{"url":"https://bugzilla.suse.com/1276565","tags":["report"]},{"url":"https://bugzilla.suse.com/1276570","tags":["report"]},{"url":"https://bugzilla.suse.com/1276573","tags":["report"]},{"url":"https://bugzilla.suse.com/1276579","tags":["report"]},{"url":"https://bugzilla.suse.com/1276783","tags":["report"]},{"url":"https://bugzilla.suse.com/1276852","tags":["report"]},{"url":"https://bugzilla.suse.com/1276921","tags":["report"]},{"url":"https://bugzilla.suse.com/1276923","tags":["report"]},{"url":"https://bugzilla.suse.com/1276930","tags":["report"]},{"url":"https://bugzilla.suse.com/1276947","tags":["report"]},{"url":"https://bugzilla.suse.com/1277030","tags":["report"]},{"url":"https://bugzilla.suse.com/1277032","tags":["report"]},{"url":"https://bugzilla.suse.com/1277036","tags":["report"]},{"url":"https://bugzilla.suse.com/1277098","tags":["report"]},{"url":"https://bugzilla.suse.com/1277101","tags":["report"]},{"url":"https://bugzilla.suse.com/1277109","tags":["report"]},{"url":"https://bugzilla.suse.com/1277122","tags":["report"]},{"url":"https://bugzilla.suse.com/1277128","tags":["report"]},{"url":"https://bugzilla.suse.com/1277129","tags":["report"]},{"url":"https://bugzilla.suse.com/1277143","tags":["report"]},{"url":"https://bugzilla.suse.com/1277149","tags":["report"]},{"url":"https://bugzilla.suse.com/1277153","tags":["report"]},{"url":"https://bugzilla.suse.com/1277215","tags":["report"]},{"url":"https://bugzilla.suse.com/1277217","tags":["report"]},{"url":"https://bugzilla.suse.com/1277218","tags":["report"]},{"url":"https://bugzilla.suse.com/1277234","tags":["report"]},{"url":"https://bugzilla.suse.com/1277245","tags":["report"]},{"url":"https://bugzilla.suse.com/1277272","tags":["report"]},{"url":"https://bugzilla.suse.com/1277277","tags":["report"]},{"url":"https://bugzilla.suse.com/1277296","tags":["report"]},{"url":"https://bugzilla.suse.com/1277314","tags":["report"]},{"url":"https://bugzilla.suse.com/1277342","tags":["report"]},{"url":"https://bugzilla.suse.com/1277371","tags":["report"]},{"url":"https://bugzilla.suse.com/1277372","tags":["report"]},{"url":"https://bugzilla.suse.com/1277374","tags":["report"]},{"url":"https://bugzilla.suse.com/1277379","tags":["report"]},{"url":"https://bugzilla.suse.com/1277382","tags":["report"]},{"url":"https://bugzilla.suse.com/1277392","tags":["report"]},{"url":"https://bugzilla.suse.com/1277396","tags":["report"]},{"url":"https://bugzilla.suse.com/1277401","tags":["report"]},{"url":"https://bugzilla.suse.com/1277405","tags":["report"]},{"url":"https://bugzilla.suse.com/1277410","tags":["report"]},{"url":"https://bugzilla.suse.com/1277452","tags":["report"]},{"url":"https://bugzilla.suse.com/1277489","tags":["report"]},{"url":"https://bugzilla.suse.com/1277493","tags":["report"]},{"url":"https://bugzilla.suse.com/1277555","tags":["report"]},{"url":"https://bugzilla.suse.com/1277556","tags":["report"]},{"url":"https://bugzilla.suse.com/1277557","tags":["report"]},{"url":"https://bugzilla.suse.com/1277558","tags":["report"]},{"url":"https://bugzilla.suse.com/1277568","tags":["report"]},{"url":"https://bugzilla.suse.com/1277615","tags":["report"]},{"url":"https://bugzilla.suse.com/1277626","tags":["report"]},{"url":"https://bugzilla.suse.com/1277640","tags":["report"]},{"url":"https://bugzilla.suse.com/1277662","tags":["report"]},{"url":"https://bugzilla.suse.com/1277674","tags":["report"]},{"url":"https://bugzilla.suse.com/1277705","tags":["report"]},{"url":"https://bugzilla.suse.com/1277766","tags":["report"]},{"url":"https://bugzilla.suse.com/1277781","tags":["report"]},{"url":"https://bugzilla.suse.com/1277784","tags":["report"]},{"url":"https://bugzilla.suse.com/1277792","tags":["report"]},{"url":"https://bugzilla.suse.com/1277801","tags":["report"]},{"url":"https://bugzilla.suse.com/1277805","tags":["report"]},{"url":"https://bugzilla.suse.com/1277820","tags":["report"]},{"url":"https://bugzilla.suse.com/1277823","tags":["report"]},{"url":"https://bugzilla.suse.com/1277824","tags":["report"]},{"url":"https://bugzilla.suse.com/1277840","tags":["report"]},{"url":"https://bugzilla.suse.com/1277843","tags":["report"]},{"url":"https://bugzilla.suse.com/1277844","tags":["report"]},{"url":"https://bugzilla.suse.com/1277857","tags":["report"]},{"url":"https://bugzilla.suse.com/1277864","tags":["report"]},{"url":"https://bugzilla.suse.com/1277885","tags":["report"]},{"url":"https://bugzilla.suse.com/1277892","tags":["report"]},{"url":"https://bugzilla.suse.com/1277895","tags":["report"]},{"url":"https://bugzilla.suse.com/1277896","tags":["report"]},{"url":"https://bugzilla.suse.com/1277897","tags":["report"]},{"url":"https://bugzilla.suse.com/1277900","tags":["report"]},{"url":"https://bugzilla.suse.com/1277904","tags":["report"]},{"url":"https://bugzilla.suse.com/1277906","tags":["report"]},{"url":"https://bugzilla.suse.com/1277910","tags":["report"]},{"url":"https://bugzilla.suse.com/1277913","tags":["report"]},{"url":"https://bugzilla.suse.com/1277915","tags":["report"]},{"url":"https://bugzilla.suse.com/1278031","tags":["report"]},{"url":"https://bugzilla.suse.com/1278035","tags":["report"]},{"url":"https://bugzilla.suse.com/1278053","tags":["report"]},{"url":"https://bugzilla.suse.com/1278054","tags":["report"]},{"url":"https://bugzilla.suse.com/1278056","tags":["report"]},{"url":"https://bugzilla.suse.com/1278063","tags":["report"]},{"url":"https://bugzilla.suse.com/1278067","tags":["report"]},{"url":"https://bugzilla.suse.com/1278087","tags":["report"]},{"url":"https://bugzilla.suse.com/1278091","tags":["report"]},{"url":"https://bugzilla.suse.com/1278100","tags":["report"]},{"url":"https://bugzilla.suse.com/1278191","tags":["report"]},{"url":"https://bugzilla.suse.com/1278195","tags":["report"]},{"url":"https://bugzilla.suse.com/1278199","tags":["report"]},{"url":"https://bugzilla.suse.com/1278205","tags":["report"]},{"url":"https://bugzilla.suse.com/1278215","tags":["report"]},{"url":"https://bugzilla.suse.com/1278216","tags":["report"]},{"url":"https://bugzilla.suse.com/1278225","tags":["report"]},{"url":"https://bugzilla.suse.com/1278245","tags":["report"]},{"url":"https://bugzilla.suse.com/1278247","tags":["report"]},{"url":"https://bugzilla.suse.com/1278255","tags":["report"]},{"url":"https://bugzilla.suse.com/1278311","tags":["report"]},{"url":"https://bugzilla.suse.com/1278314","tags":["report"]},{"url":"https://bugzilla.suse.com/1278315","tags":["report"]},{"url":"https://bugzilla.suse.com/1278363","tags":["report"]},{"url":"https://bugzilla.suse.com/1278708","tags":["report"]},{"url":"https://bugzilla.suse.com/1279116","tags":["report"]},{"url":"https://bugzilla.suse.com/1279497","tags":["report"]},{"url":"https://bugzilla.suse.com/1279525","tags":["report"]},{"url":"https://bugzilla.suse.com/1279527","tags":["report"]},{"url":"https://bugzilla.suse.com/1279532","tags":["report"]},{"url":"https://bugzilla.suse.com/1279535","tags":["report"]},{"url":"https://bugzilla.suse.com/1279536","tags":["report"]},{"url":"https://bugzilla.suse.com/1279569","tags":["report"]},{"url":"https://bugzilla.suse.com/1279581","tags":["report"]},{"url":"https://bugzilla.suse.com/1279590","tags":["report"]},{"url":"https://bugzilla.suse.com/1279621","tags":["report"]},{"url":"https://bugzilla.suse.com/1279702","tags":["report"]},{"url":"https://bugzilla.suse.com/1279786","tags":["report"]},{"url":"https://bugzilla.suse.com/1279799","tags":["report"]},{"url":"https://bugzilla.suse.com/1279819","tags":["report"]},{"url":"https://bugzilla.suse.com/1279835","tags":["report"]},{"url":"https://bugzilla.suse.com/1279850","tags":["report"]},{"url":"https://bugzilla.suse.com/1279875","tags":["report"]},{"url":"https://bugzilla.suse.com/1279878","tags":["report"]},{"url":"https://bugzilla.suse.com/1279888","tags":["report"]},{"url":"https://bugzilla.suse.com/1280143","tags":["report"]},{"url":"https://bugzilla.suse.com/1280146","tags":["report"]},{"url":"https://bugzilla.suse.com/1280148","tags":["report"]},{"url":"https://bugzilla.suse.com/1280151","tags":["report"]},{"url":"https://bugzilla.suse.com/1280163","tags":["report"]},{"url":"https://bugzilla.suse.com/1280166","tags":["report"]},{"url":"https://bugzilla.suse.com/1280171","tags":["report"]},{"url":"https://bugzilla.suse.com/1280178","tags":["report"]},{"url":"https://bugzilla.suse.com/1280179","tags":["report"]},{"url":"https://bugzilla.suse.com/1280184","tags":["report"]},{"url":"https://bugzilla.suse.com/1280193","tags":["report"]},{"url":"https://bugzilla.suse.com/1280206","tags":["report"]},{"url":"https://bugzilla.suse.com/1280235","tags":["report"]},{"url":"https://bugzilla.suse.com/1280237","tags":["report"]},{"url":"https://bugzilla.suse.com/1280243","tags":["report"]},{"url":"https://bugzilla.suse.com/1280251","tags":["report"]},{"url":"https://bugzilla.suse.com/1280252","tags":["report"]},{"url":"https://bugzilla.suse.com/1280263","tags":["report"]},{"url":"https://bugzilla.suse.com/1280296","tags":["report"]},{"url":"https://bugzilla.suse.com/1280298","tags":["report"]},{"url":"https://bugzilla.suse.com/1280299","tags":["report"]},{"url":"https://bugzilla.suse.com/1280303","tags":["report"]},{"url":"https://bugzilla.suse.com/1280309","tags":["report"]},{"url":"https://bugzilla.suse.com/1280333","tags":["report"]},{"url":"https://bugzilla.suse.com/1280334","tags":["report"]},{"url":"https://bugzilla.suse.com/1280335","tags":["report"]},{"url":"https://bugzilla.suse.com/1280336","tags":["report"]},{"url":"https://bugzilla.suse.com/1280338","tags":["report"]},{"url":"https://bugzilla.suse.com/1280350","tags":["report"]},{"url":"https://bugzilla.suse.com/1280375","tags":["report"]},{"url":"https://bugzilla.suse.com/1280379","tags":["report"]},{"url":"https://bugzilla.suse.com/1280383","tags":["report"]},{"url":"https://bugzilla.suse.com/1280384","tags":["report"]},{"url":"https://bugzilla.suse.com/1280387","tags":["report"]},{"url":"https://bugzilla.suse.com/1280388","tags":["report"]},{"url":"https://bugzilla.suse.com/1280449","tags":["report"]},{"url":"https://bugzilla.suse.com/1280451","tags":["report"]},{"url":"https://bugzilla.suse.com/1280455","tags":["report"]},{"url":"https://bugzilla.suse.com/1280456","tags":["report"]},{"url":"https://bugzilla.suse.com/1280464","tags":["report"]},{"url":"https://bugzilla.suse.com/1280468","tags":["report"]},{"url":"https://bugzilla.suse.com/1280477","tags":["report"]},{"url":"https://bugzilla.suse.com/1280487","tags":["report"]},{"url":"https://bugzilla.suse.com/1280488","tags":["report"]},{"url":"https://bugzilla.suse.com/1280490","tags":["report"]},{"url":"https://bugzilla.suse.com/1280494","tags":["report"]},{"url":"https://bugzilla.suse.com/1280508","tags":["report"]},{"url":"https://bugzilla.suse.com/1280509","tags":["report"]},{"url":"https://bugzilla.suse.com/1280518","tags":["report"]},{"url":"https://bugzilla.suse.com/1280525","tags":["report"]},{"url":"https://bugzilla.suse.com/1280544","tags":["report"]},{"url":"https://bugzilla.suse.com/1280546","tags":["report"]},{"url":"https://bugzilla.suse.com/1280548","tags":["report"]},{"url":"https://bugzilla.suse.com/1280551","tags":["report"]},{"url":"https://bugzilla.suse.com/1280576","tags":["report"]},{"url":"https://bugzilla.suse.com/1280577","tags":["report"]},{"url":"https://bugzilla.suse.com/1280711","tags":["report"]},{"url":"https://bugzilla.suse.com/1280716","tags":["report"]},{"url":"https://bugzilla.suse.com/1280717","tags":["report"]},{"url":"https://bugzilla.suse.com/1280719","tags":["report"]},{"url":"https://bugzilla.suse.com/1280720","tags":["report"]},{"url":"https://bugzilla.suse.com/1280726","tags":["report"]},{"url":"https://bugzilla.suse.com/1280727","tags":["report"]},{"url":"https://bugzilla.suse.com/1280733","tags":["report"]},{"url":"https://bugzilla.suse.com/1280758","tags":["report"]},{"url":"https://bugzilla.suse.com/1280761","tags":["report"]},{"url":"https://bugzilla.suse.com/1280766","tags":["report"]},{"url":"https://bugzilla.suse.com/1280786","tags":["report"]},{"url":"https://bugzilla.suse.com/1280797","tags":["report"]},{"url":"https://bugzilla.suse.com/1280870","tags":["report"]},{"url":"https://bugzilla.suse.com/1280872","tags":["report"]},{"url":"https://bugzilla.suse.com/1280901","tags":["report"]},{"url":"https://bugzilla.suse.com/1280920","tags":["report"]},{"url":"https://bugzilla.suse.com/1280923","tags":["report"]},{"url":"https://bugzilla.suse.com/1280969","tags":["report"]},{"url":"https://bugzilla.suse.com/1280985","tags":["report"]},{"url":"https://bugzilla.suse.com/1280993","tags":["report"]},{"url":"https://bugzilla.suse.com/1281010","tags":["report"]},{"url":"https://bugzilla.suse.com/1281014","tags":["report"]},{"url":"https://bugzilla.suse.com/1281025","tags":["report"]},{"url":"https://bugzilla.suse.com/1281054","tags":["report"]},{"url":"https://bugzilla.suse.com/1281057","tags":["report"]},{"url":"https://bugzilla.suse.com/1281077","tags":["report"]},{"url":"https://bugzilla.suse.com/1281085","tags":["report"]},{"url":"https://bugzilla.suse.com/1281136","tags":["report"]},{"url":"https://bugzilla.suse.com/1281201","tags":["report"]},{"url":"https://bugzilla.suse.com/1281202","tags":["report"]},{"url":"https://bugzilla.suse.com/1281224","tags":["report"]},{"url":"https://bugzilla.suse.com/1281226","tags":["report"]},{"url":"https://bugzilla.suse.com/1281228","tags":["report"]},{"url":"https://bugzilla.suse.com/1281229","tags":["report"]},{"url":"https://bugzilla.suse.com/1281231","tags":["report"]},{"url":"https://bugzilla.suse.com/1281273","tags":["report"]},{"url":"https://bugzilla.suse.com/1281295","tags":["report"]},{"url":"https://bugzilla.suse.com/1281379","tags":["report"]},{"url":"https://bugzilla.suse.com/1281387","tags":["report"]},{"url":"https://bugzilla.suse.com/1281399","tags":["report"]},{"url":"https://bugzilla.suse.com/1281408","tags":["report"]},{"url":"https://bugzilla.suse.com/1281496","tags":["report"]},{"url":"https://bugzilla.suse.com/1281514","tags":["report"]},{"url":"https://bugzilla.suse.com/1281525","tags":["report"]},{"url":"https://bugzilla.suse.com/1281546","tags":["report"]},{"url":"https://bugzilla.suse.com/1281597","tags":["report"]},{"url":"https://bugzilla.suse.com/1281599","tags":["report"]},{"url":"https://bugzilla.suse.com/1281644","tags":["report"]},{"url":"https://bugzilla.suse.com/1281645","tags":["report"]},{"url":"https://bugzilla.suse.com/1281660","tags":["report"]},{"url":"https://bugzilla.suse.com/1281680","tags":["report"]},{"url":"https://bugzilla.suse.com/1281682","tags":["report"]},{"url":"https://bugzilla.suse.com/1281683","tags":["report"]},{"url":"https://bugzilla.suse.com/1281717","tags":["report"]},{"url":"https://bugzilla.suse.com/1281732","tags":["report"]},{"url":"https://bugzilla.suse.com/1281738","tags":["report"]},{"url":"https://bugzilla.suse.com/1281754","tags":["report"]},{"url":"https://bugzilla.suse.com/1281777","tags":["report"]},{"url":"https://bugzilla.suse.com/1281778","tags":["report"]},{"url":"https://bugzilla.suse.com/1281786","tags":["report"]},{"url":"https://bugzilla.suse.com/1281789","tags":["report"]},{"url":"https://bugzilla.suse.com/1281795","tags":["report"]},{"url":"https://bugzilla.suse.com/1281808","tags":["report"]},{"url":"https://bugzilla.suse.com/1281825","tags":["report"]},{"url":"https://bugzilla.suse.com/1281845","tags":["report"]},{"url":"https://bugzilla.suse.com/1281922","tags":["report"]},{"url":"https://bugzilla.suse.com/1281955","tags":["report"]},{"url":"https://bugzilla.suse.com/1281956","tags":["report"]},{"url":"https://bugzilla.suse.com/1281964","tags":["report"]},{"url":"https://bugzilla.suse.com/1281973","tags":["report"]},{"url":"https://bugzilla.suse.com/1281991","tags":["report"]},{"url":"https://bugzilla.suse.com/1282003","tags":["report"]},{"url":"https://bugzilla.suse.com/1282013","tags":["report"]},{"url":"https://bugzilla.suse.com/1282020","tags":["report"]},{"url":"https://bugzilla.suse.com/1282050","tags":["report"]},{"url":"https://bugzilla.suse.com/1282054","tags":["report"]},{"url":"https://bugzilla.suse.com/1282072","tags":["report"]},{"url":"https://bugzilla.suse.com/1282104","tags":["report"]},{"url":"https://bugzilla.suse.com/1282110","tags":["report"]},{"url":"https://bugzilla.suse.com/1282113","tags":["report"]},{"url":"https://bugzilla.suse.com/1282143","tags":["report"]},{"url":"https://bugzilla.suse.com/1282147","tags":["report"]},{"url":"https://bugzilla.suse.com/1282197","tags":["report"]},{"url":"https://bugzilla.suse.com/1282270","tags":["report"]},{"url":"https://bugzilla.suse.com/1282271","tags":["report"]},{"url":"https://bugzilla.suse.com/1282288","tags":["report"]},{"url":"https://bugzilla.suse.com/1282648","tags":["report"]},{"url":"https://bugzilla.suse.com/1282672","tags":["report"]},{"url":"https://bugzilla.suse.com/1282747","tags":["report"]},{"url":"https://bugzilla.suse.com/1282774","tags":["report"]},{"url":"https://bugzilla.suse.com/1282803","tags":["report"]},{"url":"https://bugzilla.suse.com/1282808","tags":["report"]},{"url":"https://bugzilla.suse.com/1282812","tags":["report"]},{"url":"https://bugzilla.suse.com/1282823","tags":["report"]},{"url":"https://bugzilla.suse.com/1282881","tags":["report"]},{"url":"https://bugzilla.suse.com/1282891","tags":["report"]},{"url":"https://bugzilla.suse.com/1282906","tags":["report"]},{"url":"https://bugzilla.suse.com/1282975","tags":["report"]},{"url":"https://bugzilla.suse.com/1282997","tags":["report"]},{"url":"https://bugzilla.suse.com/1283119","tags":["report"]},{"url":"https://bugzilla.suse.com/1283130","tags":["report"]},{"url":"https://bugzilla.suse.com/1283149","tags":["report"]},{"url":"https://bugzilla.suse.com/1283154","tags":["report"]},{"url":"https://bugzilla.suse.com/1283163","tags":["report"]},{"url":"https://bugzilla.suse.com/1283166","tags":["report"]},{"url":"https://bugzilla.suse.com/1283173","tags":["report"]},{"url":"https://bugzilla.suse.com/1283176","tags":["report"]},{"url":"https://bugzilla.suse.com/1283201","tags":["report"]},{"url":"https://bugzilla.suse.com/1283203","tags":["report"]},{"url":"https://bugzilla.suse.com/1283205","tags":["report"]},{"url":"https://bugzilla.suse.com/1283213","tags":["report"]},{"url":"https://bugzilla.suse.com/1283230","tags":["report"]},{"url":"https://bugzilla.suse.com/1283296","tags":["report"]},{"url":"https://bugzilla.suse.com/1283312","tags":["report"]},{"url":"https://bugzilla.suse.com/1283328","tags":["report"]},{"url":"https://bugzilla.suse.com/1283450","tags":["report"]},{"url":"https://bugzilla.suse.com/1283475","tags":["report"]},{"url":"https://bugzilla.suse.com/1283479","tags":["report"]},{"url":"https://bugzilla.suse.com/1283489","tags":["report"]},{"url":"https://bugzilla.suse.com/1283490","tags":["report"]},{"url":"https://bugzilla.suse.com/1283517","tags":["report"]},{"url":"https://bugzilla.suse.com/1283739","tags":["report"]},{"url":"https://bugzilla.suse.com/1283794","tags":["report"]},{"url":"https://bugzilla.suse.com/1283795","tags":["report"]},{"url":"https://bugzilla.suse.com/1283805","tags":["report"]},{"url":"https://bugzilla.suse.com/1283880","tags":["report"]},{"url":"https://bugzilla.suse.com/1283906","tags":["report"]},{"url":"https://bugzilla.suse.com/1283945","tags":["report"]},{"url":"https://bugzilla.suse.com/1284146","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98091","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624184-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624197-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624235-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264120-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236344","tags":["report"]},{"url":"https://bugzilla.suse.com/1240957","tags":["report"]},{"url":"https://bugzilla.suse.com/1241363","tags":["report"]},{"url":"https://bugzilla.suse.com/1247180","tags":["report"]},{"url":"https://bugzilla.suse.com/1249104","tags":["report"]},{"url":"https://bugzilla.suse.com/1251130","tags":["report"]},{"url":"https://bugzilla.suse.com/1253454","tags":["report"]},{"url":"https://bugzilla.suse.com/1258472","tags":["report"]},{"url":"https://bugzilla.suse.com/1261562","tags":["report"]},{"url":"https://bugzilla.suse.com/1263052","tags":["report"]},{"url":"https://bugzilla.suse.com/1263864","tags":["report"]},{"url":"https://bugzilla.suse.com/1264010","tags":["report"]},{"url":"https://bugzilla.suse.com/1264012","tags":["report"]},{"url":"https://bugzilla.suse.com/1264643","tags":["report"]},{"url":"https://bugzilla.suse.com/1264740","tags":["report"]},{"url":"https://bugzilla.suse.com/1264807","tags":["report"]},{"url":"https://bugzilla.suse.com/1265220","tags":["report"]},{"url":"https://bugzilla.suse.com/1267236","tags":["report"]},{"url":"https://bugzilla.suse.com/1267505","tags":["report"]},{"url":"https://bugzilla.suse.com/1269140","tags":["report"]},{"url":"https://bugzilla.suse.com/1269313","tags":["report"]},{"url":"https://bugzilla.suse.com/1269402","tags":["report"]},{"url":"https://bugzilla.suse.com/1269647","tags":["report"]},{"url":"https://bugzilla.suse.com/1269888","tags":["report"]},{"url":"https://bugzilla.suse.com/1270263","tags":["report"]},{"url":"https://bugzilla.suse.com/1270268","tags":["report"]},{"url":"https://bugzilla.suse.com/1272351","tags":["report"]},{"url":"https://bugzilla.suse.com/1272359","tags":["report"]},{"url":"https://bugzilla.suse.com/1272383","tags":["report"]},{"url":"https://bugzilla.suse.com/1272502","tags":["report"]},{"url":"https://bugzilla.suse.com/1272618","tags":["report"]},{"url":"https://bugzilla.suse.com/1272804","tags":["report"]},{"url":"https://bugzilla.suse.com/1272893","tags":["report"]},{"url":"https://bugzilla.suse.com/1272993","tags":["report"]},{"url":"https://bugzilla.suse.com/1273005","tags":["report"]},{"url":"https://bugzilla.suse.com/1273032","tags":["report"]},{"url":"https://bugzilla.suse.com/1273033","tags":["report"]},{"url":"https://bugzilla.suse.com/1273036","tags":["report"]},{"url":"https://bugzilla.suse.com/1273037","tags":["report"]},{"url":"https://bugzilla.suse.com/1273134","tags":["report"]},{"url":"https://bugzilla.suse.com/1273277","tags":["report"]},{"url":"https://bugzilla.suse.com/1273280","tags":["report"]},{"url":"https://bugzilla.suse.com/1273460","tags":["report"]},{"url":"https://bugzilla.suse.com/1273465","tags":["report"]},{"url":"https://bugzilla.suse.com/1273581","tags":["report"]},{"url":"https://bugzilla.suse.com/1273679","tags":["report"]},{"url":"https://bugzilla.suse.com/1273681","tags":["report"]},{"url":"https://bugzilla.suse.com/1273797","tags":["report"]},{"url":"https://bugzilla.suse.com/1273801","tags":["report"]},{"url":"https://bugzilla.suse.com/1273812","tags":["report"]},{"url":"https://bugzilla.suse.com/1273859","tags":["report"]},{"url":"https://bugzilla.suse.com/1274008","tags":["report"]},{"url":"https://bugzilla.suse.com/1274009","tags":["report"]},{"url":"https://bugzilla.suse.com/1274010","tags":["report"]},{"url":"https://bugzilla.suse.com/1274055","tags":["report"]},{"url":"https://bugzilla.suse.com/1274071","tags":["report"]},{"url":"https://bugzilla.suse.com/1274264","tags":["report"]},{"url":"https://bugzilla.suse.com/1274267","tags":["report"]},{"url":"https://bugzilla.suse.com/1274295","tags":["report"]},{"url":"https://bugzilla.suse.com/1274783","tags":["report"]},{"url":"https://bugzilla.suse.com/1274835","tags":["report"]},{"url":"https://bugzilla.suse.com/1274849","tags":["report"]},{"url":"https://bugzilla.suse.com/1274877","tags":["report"]},{"url":"https://bugzilla.suse.com/1274895","tags":["report"]},{"url":"https://bugzilla.suse.com/1274906","tags":["report"]},{"url":"https://bugzilla.suse.com/1275081","tags":["report"]},{"url":"https://bugzilla.suse.com/1275139","tags":["report"]},{"url":"https://bugzilla.suse.com/1275141","tags":["report"]},{"url":"https://bugzilla.suse.com/1275146","tags":["report"]},{"url":"https://bugzilla.suse.com/1275148","tags":["report"]},{"url":"https://bugzilla.suse.com/1275149","tags":["report"]},{"url":"https://bugzilla.suse.com/1275156","tags":["report"]},{"url":"https://bugzilla.suse.com/1275192","tags":["report"]},{"url":"https://bugzilla.suse.com/1275300","tags":["report"]},{"url":"https://bugzilla.suse.com/1275519","tags":["report"]},{"url":"https://bugzilla.suse.com/1275557","tags":["report"]},{"url":"https://bugzilla.suse.com/1275572","tags":["report"]},{"url":"https://bugzilla.suse.com/1275656","tags":["report"]},{"url":"https://bugzilla.suse.com/1275737","tags":["report"]},{"url":"https://bugzilla.suse.com/1275789","tags":["report"]},{"url":"https://bugzilla.suse.com/1275822","tags":["report"]},{"url":"https://bugzilla.suse.com/1275823","tags":["report"]},{"url":"https://bugzilla.suse.com/1275928","tags":["report"]},{"url":"https://bugzilla.suse.com/1276552","tags":["report"]},{"url":"https://bugzilla.suse.com/1276577","tags":["report"]},{"url":"https://bugzilla.suse.com/1276912","tags":["report"]},{"url":"https://bugzilla.suse.com/1276913","tags":["report"]},{"url":"https://bugzilla.suse.com/1276944","tags":["report"]},{"url":"https://bugzilla.suse.com/1276955","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-39939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264254-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281691","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90082","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264687-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1031492","tags":["report"]},{"url":"https://bugzilla.suse.com/1045298","tags":["report"]},{"url":"https://bugzilla.suse.com/1254633","tags":["report"]},{"url":"https://bugzilla.suse.com/1265138","tags":["report"]},{"url":"https://bugzilla.suse.com/1266412","tags":["report"]},{"url":"https://bugzilla.suse.com/1267985","tags":["report"]},{"url":"https://bugzilla.suse.com/1267990","tags":["report"]},{"url":"https://bugzilla.suse.com/1269081","tags":["report"]},{"url":"https://bugzilla.suse.com/1269131","tags":["report"]},{"url":"https://bugzilla.suse.com/1269816","tags":["report"]},{"url":"https://bugzilla.suse.com/1271834","tags":["report"]},{"url":"https://bugzilla.suse.com/1271906","tags":["report"]},{"url":"https://bugzilla.suse.com/1272211","tags":["report"]},{"url":"https://bugzilla.suse.com/1272471","tags":["report"]},{"url":"https://bugzilla.suse.com/1272472","tags":["report"]},{"url":"https://bugzilla.suse.com/1272480","tags":["report"]},{"url":"https://bugzilla.suse.com/1272499","tags":["report"]},{"url":"https://bugzilla.suse.com/1272517","tags":["report"]},{"url":"https://bugzilla.suse.com/1272522","tags":["report"]},{"url":"https://bugzilla.suse.com/1272523","tags":["report"]},{"url":"https://bugzilla.suse.com/1272642","tags":["report"]},{"url":"https://bugzilla.suse.com/1273023","tags":["report"]},{"url":"https://bugzilla.suse.com/1273420","tags":["report"]},{"url":"https://bugzilla.suse.com/1273776","tags":["report"]},{"url":"https://bugzilla.suse.com/1273953","tags":["report"]},{"url":"https://bugzilla.suse.com/1275681","tags":["report"]},{"url":"https://bugzilla.suse.com/1275957","tags":["report"]},{"url":"https://bugzilla.suse.com/1275958","tags":["report"]},{"url":"https://bugzilla.suse.com/1275959","tags":["report"]},{"url":"https://bugzilla.suse.com/1276321","tags":["report"]},{"url":"https://bugzilla.suse.com/1276339","tags":["report"]},{"url":"https://bugzilla.suse.com/1276381","tags":["report"]},{"url":"https://bugzilla.suse.com/1276468","tags":["report"]},{"url":"https://bugzilla.suse.com/1276473","tags":["report"]},{"url":"https://bugzilla.suse.com/1276495","tags":["report"]},{"url":"https://bugzilla.suse.com/1276585","tags":["report"]},{"url":"https://bugzilla.suse.com/1276801","tags":["report"]},{"url":"https://bugzilla.suse.com/1276803","tags":["report"]},{"url":"https://bugzilla.suse.com/1276814","tags":["report"]},{"url":"https://bugzilla.suse.com/1276818","tags":["report"]},{"url":"https://bugzilla.suse.com/1276865","tags":["report"]},{"url":"https://bugzilla.suse.com/1276866","tags":["report"]},{"url":"https://bugzilla.suse.com/1276905","tags":["report"]},{"url":"https://bugzilla.suse.com/1276925","tags":["report"]},{"url":"https://bugzilla.suse.com/1276934","tags":["report"]},{"url":"https://bugzilla.suse.com/1277070","tags":["report"]},{"url":"https://bugzilla.suse.com/1277231","tags":["report"]},{"url":"https://bugzilla.suse.com/1277249","tags":["report"]},{"url":"https://bugzilla.suse.com/1277265","tags":["report"]},{"url":"https://bugzilla.suse.com/1277268","tags":["report"]},{"url":"https://bugzilla.suse.com/1277321","tags":["report"]},{"url":"https://bugzilla.suse.com/1277349","tags":["report"]},{"url":"https://bugzilla.suse.com/1277485","tags":["report"]},{"url":"https://bugzilla.suse.com/1277544","tags":["report"]},{"url":"https://bugzilla.suse.com/1277590","tags":["report"]},{"url":"https://bugzilla.suse.com/1277656","tags":["report"]},{"url":"https://bugzilla.suse.com/1277822","tags":["report"]},{"url":"https://bugzilla.suse.com/1277881","tags":["report"]},{"url":"https://bugzilla.suse.com/1277918","tags":["report"]},{"url":"https://bugzilla.suse.com/1278094","tags":["report"]},{"url":"https://bugzilla.suse.com/1278178","tags":["report"]},{"url":"https://bugzilla.suse.com/1278180","tags":["report"]},{"url":"https://bugzilla.suse.com/1278210","tags":["report"]},{"url":"https://bugzilla.suse.com/1278211","tags":["report"]},{"url":"https://bugzilla.suse.com/1278310","tags":["report"]},{"url":"https://bugzilla.suse.com/1278416","tags":["report"]},{"url":"https://bugzilla.suse.com/1278716","tags":["report"]},{"url":"https://bugzilla.suse.com/1279485","tags":["report"]},{"url":"https://bugzilla.suse.com/1279619","tags":["report"]},{"url":"https://bugzilla.suse.com/1279627","tags":["report"]},{"url":"https://bugzilla.suse.com/1279809","tags":["report"]},{"url":"https://bugzilla.suse.com/1279812","tags":["report"]},{"url":"https://bugzilla.suse.com/1280139","tags":["report"]},{"url":"https://bugzilla.suse.com/1280223","tags":["report"]},{"url":"https://bugzilla.suse.com/1280230","tags":["report"]},{"url":"https://bugzilla.suse.com/1280581","tags":["report"]},{"url":"https://bugzilla.suse.com/1281176","tags":["report"]},{"url":"https://bugzilla.suse.com/1281352","tags":["report"]},{"url":"https://bugzilla.suse.com/1281358","tags":["report"]},{"url":"https://bugzilla.suse.com/1281359","tags":["report"]},{"url":"https://bugzilla.suse.com/1281397","tags":["report"]},{"url":"https://bugzilla.suse.com/1281429","tags":["report"]},{"url":"https://bugzilla.suse.com/1281708","tags":["report"]},{"url":"https://bugzilla.suse.com/1282284","tags":["report"]},{"url":"https://bugzilla.suse.com/1283935","tags":["report"]},{"url":"https://bugzilla.suse.com/1283973","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98164","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-64388","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64388","tags":["report"]},{"url":"https://git.kernel.org/linus/760ef2c579c2609cf17fb1cd5392f64d42d43d33","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8726-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8727-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8728-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8760-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8726-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8726-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8800-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8760-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8728-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8726-4","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8728-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8886-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-10263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63799","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63811","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63815","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63818","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63820","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63825","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63831","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63869","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63870","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63874","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64513","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-54518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45839","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52980","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63839","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63864","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63866","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63980","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-37807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74656","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97509","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64601","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-64388","title":"smb/client: fix chown/chgrp with SMB3 POSIX Extensions","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.","status":"published","published":"2026-07-25T08:50:36.202Z","modified":"2026-10-30T12:27:49.236Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:19:57.818032Z"}],"euvd":[{"id":"EUVD-2026-48932","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.","status":"published","published":"2026-07-25T08:50:36Z","modified":"2026-10-30T12:27:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:59:10.642243Z"}],"ghsa":[{"id":"GHSA-p59x-f8qp-h8m2","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.","status":"published","published":"2026-07-25T12:31:33Z","modified":"2026-10-30T15:33:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T15:14:47.945207Z"}],"nvd":[{"id":"CVE-2026-64388","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.","status":"published","published":"2026-07-25T10:17:22.127Z","modified":"2026-10-30T13:19:35.133Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:12:32.830533Z"}],"osv":[{"id":"BELL-CVE-2026-64388","status":"published","published":"2026-07-29T06:05:47.60185Z","modified":"2026-11-04T07:16:35.269328049Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T07:31:37.974902Z"},{"id":"CVE-2026-64388","title":"smb/client: fix chown/chgrp with SMB3 POSIX Extensions","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.","status":"published","published":"2026-07-25T08:50:36.202Z","modified":"2026-11-01T02:30:48.973725222Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:14.096824Z"},{"id":"DEBIAN-CVE-2026-64388","description":"In the Linux kernel, the following vulnerability has been resolved:  smb/client: fix chown/chgrp with SMB3 POSIX Extensions  Ownership (chown) and group (chgrp) modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or CIFS_MOUNT_MODE_FROM_SID were also explicitly set.  Fix this by checking for posix_extensions in cifs_setattr_nounix() when updating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map and set the ownership/group information on the server.","status":"published","published":"2026-07-25T10:17:22.127Z","modified":"2026-11-02T18:00:26.266780872Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:03:20.122208Z"},{"id":"OESA-2026-3316","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/flexfiles: reject zero filehandle version count\n\nff_layout_alloc_lseg() decodes the filehandle-version array count\nfrom the flexfiles layout body. The value is used as the count for\nkzalloc_objs(), and the current code only rejects NULL.\n\nA zero count yields ZERO_SIZE_PTR, which can be stored in\ndss_info-\u0026gt;fh_versions even though later flexfiles paths assume that at\nleast one filehandle version exists.\n\nReject fh_count == 0 before the allocation, matching the existing zero\nversion_count validation in the flexfiles GETDEVICEINFO parser.\n\nA QEMU/KASAN run with a malformed flexfiles layout hit:\n\n  KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n  RIP: 0010:ff_layout_encode_ff_layoutupdate.isra.0+0x15f/0x750\n  ff_layout_encode_layoutreturn+0x683/0x970\n  nfs4_xdr_enc_layoutreturn+0x278/0x3a0\n  Kernel panic - not syncing: Fatal exception\n\nThe patched kernel rejects the malformed layout without KASAN/oops/panic,\nand a valid fh_count=1 regression still opens, reads, and unmounts cleanly.(CVE-2026-53392)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: release layout stid on setlease failure\n\nnfs4_alloc_stid() publishes the new stid into cl-\u0026gt;cl_stateids via\nidr_alloc_cyclic() under cl_lock before returning to\nnfsd4_alloc_layout_stateid(). When nfsd4_layout_setlease() then\nfails, the error path frees the layout stateid directly with\nkmem_cache_free() without ever calling idr_remove(), leaving the\nIDR slot pointing at freed slab memory. Any subsequent IDR walker\n(states_show, client teardown) dereferences the dangling pointer.\n\nThe correct teardown for an IDR-published stid is nfs4_put_stid(),\nwhich removes the IDR slot under cl_lock, dispatches sc_free\n(nfsd4_free_layout_stateid) to release ls-\u0026gt;ls_file via\nnfsd4_close_layout(), and drops the nfs4_file reference in its\ntail.\n\nA second issue blocks that switch: nfsd4_free_layout_stateid()\nunconditionally inspects ls-\u0026gt;ls_fence_work via\ndelayed_work_pending() under ls_lock, but\nINIT_DELAYED_WORK(\u0026amp;ls-\u0026gt;ls_fence_work, ...) currently runs only\nafter the setlease call. On the setlease-failure path the\ndestructor would touch an uninitialized delayed_work.\n\n    nfsd4_alloc_layout_stateid()\n      nfs4_alloc_stid()           /* idr_alloc_cyclic under cl_lock */\n      nfsd4_layout_setlease()     /* fails */\n        nfs4_put_stid()\n          nfsd4_free_layout_stateid()\n            delayed_work_pending(\u0026amp;ls-\u0026gt;ls_fence_work)  /* needs INIT */\n            nfsd4_close_layout()  /* nfsd_file_put(ls-\u0026gt;ls_file) */\n          put_nfs4_file()\n\nFix by hoisting the ls_fenced / ls_fence_delay / INIT_DELAYED_WORK\ninitialization above the nfsd4_layout_setlease() call, and replace\nthe manual nfsd_file_put + put_nfs4_file + kmem_cache_free cleanup\nwith a single nfs4_put_stid(stp).(CVE-2026-53399)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ni2c: stub: Reject I2C block transfers with invalid length\n\nThe I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data-\u0026gt;block[0]\nas the transfer length. The existing check only clamps it to avoid\noverrunning the chip-\u0026gt;words[256] register array, but does not validate\nit against I2C_SMBUS_BLOCK_MAX (32), which is the limit of the union\ni2c_smbus_data.block buffer (34 bytes total). The driver is a\ndevelopment/test tool (CONFIG_I2C_STUB=m, not built by default)\nthat must be loaded with a chip_addr= parameter.\n\nA local user with access to /dev/i2c-* can issue an I2C_SMBUS ioctl\nwith I2C_SMBUS_I2C_BLOCK_DATA and data-\u0026gt;block[0] \u0026gt; 32, causing\nstub_xfer() to read or write past the end of the union\ni2c_smbus_data.block buffer:\n\n BUG: KASAN: stack-out-of-bounds in stub_xfer (drivers/i2c/i2c-stub.c:223)\n Read of size 1 at addr ffff88800abcfd92 by task exploit/81\n Call Trace:\n  \u0026lt;TASK\u0026gt;\n  stub_xfer (drivers/i2c/i2c-stub.c:223)\n  __i2c_smbus_xfer (drivers/i2c/i2c-core-smbus.c:593)\n  i2c_smbus_xfer (drivers/i2c/i2c-core-smbus.c:536)\n  i2cdev_ioctl_smbus (drivers/i2c/i2c-dev.c:391)\n  i2cdev_ioctl (drivers/i2c/i2c-dev.c:478)\n  __x64_sys_ioctl (fs/ioctl.c:583)\n  do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n  \u0026lt;/TASK\u0026gt;\n\nThe bug exists because i2c-stub implements .smbus_xfer directly,\nbypassing the I2C_SMBUS_BLOCK_MAX validation in\ni2c_smbus_xfer_emulated(). The I2C_SMBUS_BLOCK_DATA case in the same\nfunction correctly validates against I2C_SMBUS_BLOCK_MAX, but the\nI2C_SMBUS_I2C_BLOCK_DATA case does not.\n\nFix by rejecting transfers with data-\u0026gt;block[0] == 0 or\ndata-\u0026gt;block[0] \u0026gt; I2C_SMBUS_BLOCK_MAX with -EINVAL, consistent with\nboth the I2C_SMBUS_BLOCK_DATA case in the same function and the\nI2C_SMBUS_I2C_BLOCK_DATA validation in i2c_smbus_xfer_emulated().(CVE-2026-64191)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfuse: re-lock request before returning from fuse_ref_folio()\n\nfuse_ref_folio() unlocks the request but does not re-lock it before\nreturning. fuse_chan_abort() can end the request and the async end\ncallback (eg fuse_writepage_free()) can free the args while the\nsubsequent copy chain logic after fuse_ref_folio() accesses them,\nleading to use-after-free issues.\n\nFix this by locking the request in fuse_ref_folio() before returning.(CVE-2026-64266)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent out-of-bounds read in glob matching\n\nString event fields are not necessarily NUL-terminated, so the filter\npredicate functions (filter_pred_string(), filter_pred_strloc() and\nfilter_pred_strrelloc()) pass the field length to the regex match\ncallbacks, and the length-aware matchers honour it.\n\nregex_match_glob() was the exception: it ignored the length and called\nglob_match(), which scans the string until it hits a NUL byte. Some\nstring fields are not NUL-terminated. One example is the dynamic char\narray of the xfs_* namespace tracepoints, which is copied without a\ntrailing NUL. For such a field, glob matching reads past the end of\nthe event field, causing a KASAN slab-out-of-bounds read in\nglob_match(), reached via regex_match_glob() and filter_match_preds()\nfrom the xfs_lookup tracepoint.\n\nAdd a length-bounded glob_match_len() and use it from regex_match_glob()\nso glob matching always stops at the field boundary. The matching loop\nis factored into a shared helper so glob_match() keeps its behaviour.(CVE-2026-64299)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT\n\nRT migration is done aggressively. When a CPU schedules out a high\npriority RT task for a lower priority task, it will look to see if there\u0026apos;s\nany RT tasks that are waiting to run on another CPU that is of higher\npriority than the task this CPU is about to run. If it finds one, it will\npull that task over to the CPU and allow it to run there instead.\n\nNormally, this pulling is done by looking at the RT overloaded mask (rto)\nwhich contains all the CPUs in the scheduler domain with RT tasks that are\nwaiting to run due to a higher priority RT task currently running on their\nCPU. The CPU that is about to schedule a lower priority task will grab the\nrq lock of the overloaded CPU and move the RT task from that CPU\u0026apos;s runqueue\nto the local one and schedule the higher priority RT task.\n\nThis caused issues when a lot of CPUs would schedule a lower priority task\nat the same time. They would all try to grab the same runqueue lock of\nthe CPU with the overloaded RT tasks. Only the first CPU that got in will\nget that task. All the others would wait until they got the runqueue lock\nand see there\u0026apos;s nothing to pull and do nothing. On systems with lots of\nCPUs, this caused a large latency (up to 500us) which is beyond what\nPREEMPT_RT is to allow.\n\nThe solution to that was to create an RT_PUSH_IPI logic. When any CPU\nwanted to pull a task, instead of grabbing the runqueue lock of the\noverloaded CPU, it would start by sending an IPI to the overloaded CPU,\nand that IPI handler would have the CPU with the waiting RT task do a push\ninstead. Then that handler would send an IPI to the next CPU with\noverloaded RT tasks, and so on. Note, after the first CPU starts this\nprocess, if another CPU wanted to do a pull, it would see that the process\nhas already begun and would only increment a counter to have the IPIs\ncontinue again.\n\nThe RT_PUSH_IPI solved the latency problem with PREEMPT_RT but could cause\na new issue with non PREEMPT_RT. Namely, softirqs run in a threaded\ncontext on PREEMPT_RT but they can run in an interrupt context in non-RT.\n\nIf an IPI lands on a CPU that has just woken up multiple RT tasks and the\ncurrent CPU is running a non RT or a low priority RT task, instead of\ndoing a push, it would simply do a schedule on that CPU. But if a softirq\nwas also executing on this CPU, the schedule would need to wait until the\nsoftirq finished. Until then, the CPU would still be considered overloaded\nas there are RT tasks still waiting to run on it.\n\nA live lock occurred on a workload that was doing heavy networking traffic\non a large machine where the softirqs would run 500us out of 750us. And it\nwould also be waking up RT tasks, causing the RT pull logic to be\nconstantly executed.\n\nWhen a softirq triggered on a CPU with RT tasks queued but not running\nyet, and the other CPUs would see this CPU as being overloaded, they would\nsend an IPI over to it. The CPU would notice that the waiting RT tasks are\nof higher priority than the currently running task and simply schedule\nthat CPU instead. But because the softirq was executing, before it could\nschedule, it would receive another IPI to do the same. The amount of IPIs\nwould slow down the currently running softirq so much that before it could\nreturn back to task context, it would execute another softirq never\nallowing the CPU to schedule. This live locked that CPU.\n\nAs RT_PUSH_IPI was created to help PREEMPT_RT, make it default off if\nPREEMPT_RT is not enabled.(CVE-2026-64374)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.(CVE-2026-64388)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nhwrng: virtio: clamp device-reported used.len at copy_data()\n\nrandom_recv_done() stores the device-reported used.len directly into\nvi-\u0026gt;data_avail.  copy_data() then indexes vi-\u0026gt;data[] using\nvi-\u0026gt;data_idx (advanced by previous copy_data() calls) and issues a\nmemcpy() without re-validating either value against the posted\nbuffer size sizeof(vi-\u0026gt;data) (SMP_CACHE_BYTES bytes, typically 32\nor 64).\n\nA malicious or buggy virtio-rng backend can set used.len beyond\nsizeof(vi-\u0026gt;data), steering the memcpy() past the end of the inline\narray into adjacent kmalloc-1k slab bytes.  hwrng_fillfn() mixes\nthose bytes into the guest RNG, and guest root can also observe\nthem directly via /dev/hwrng.\n\nConcrete impact is inside the guest:\n\n - Memory-safety / hardening: any virtio-rng backend that\n   over-reports used.len causes the driver to read past vi-\u0026gt;data\n   into unrelated slab contents.  hwrng_fillfn() is a kernel thread\n   that runs as soon as the device is probed; no guest userspace\n   interaction is required to first-trigger the OOB.\n\n - Cross-boundary leak (confidential-compute threat model): a\n   malicious hypervisor cooperating with a malicious or compromised\n   guest root userspace can use /dev/hwrng as a leak channel for\n   guest-kernel heap data.  The host sets a large used.len, guest\n   root reads /dev/hwrng, and the returned bytes contain guest\n   kernel slab contents that were adjacent to vi-\u0026gt;data.  In\n   practice, confidential-compute guests (SEV-SNP, TDX) usually\n   disable virtio-rng entirely, so this path is narrow, but the\n   fix is still worth carrying because the underlying\n   memory-safety bug contaminates the guest RNG on any host.\n\nKASAN confirms the OOB on a 7.1-rc4 guest whose virtio-rng backend\nhas been patched to report used.len = 0x10000:\n\n  BUG: KASAN: slab-out-of-bounds in virtio_read+0x394/0x5d0\n  Read of size 64 at addr ffff88800ae0ba20 by task hwrng/52\n  Call Trace:\n   __asan_memcpy+0x23/0x60\n   virtio_read+0x394/0x5d0\n   hwrng_fillfn+0xb2/0x470\n   kthread+0x2cc/0x3a0\n  Allocated by task 1:\n   probe_common+0xa5/0x660\n   virtio_dev_probe+0x549/0xbc0\n  The buggy address belongs to the object at ffff88800ae0b800\n   which belongs to the cache kmalloc-1k of size 1024\n  The buggy address is located 0 bytes to the right of\n   allocated 544-byte region [ffff88800ae0b800, ffff88800ae0ba20)\n\nSame class of bug as commit c04db81cd028 (\u0026quot;net/9p: Fix buffer\noverflow in USB transport layer\u0026quot;), which hardened\nusb9pfs_rx_complete() against unchecked device-reported length in\nthe USB 9p transport.\n\nWith the clamp at point of use and array_index_nospec() in place,\nthe same harness boots cleanly: copy_data() returns zero for the\nbogus report, the device-supplied bytes after data_idx are\ndiscarded, and the driver issues a fresh request.(CVE-2026-64456)","status":"published","published":"2026-08-13T13:56:47Z","modified":"2026-08-16T01:45:09.233584297Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3453","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: cancel rfkill_block work in wiphy_unregister()\n\nThere is a use-after-free error in cfg80211_shutdown_all_interfaces found\nby syzkaller:\n\nBUG: KASAN: use-after-free in cfg80211_shutdown_all_interfaces+0x213/0x220\nRead of size 8 at addr ffff888112a78d98 by task kworker/0:5/5326\nCPU: 0 UID: 0 PID: 5326 Comm: kworker/0:5 Not tainted 6.19.0-rc2 #2 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\nWorkqueue: events cfg80211_rfkill_block_work\nCall Trace:\n \u0026lt;TASK\u0026gt;\n dump_stack_lvl+0x116/0x1f0\n print_report+0xcd/0x630\n kasan_report+0xe0/0x110\n cfg80211_shutdown_all_interfaces+0x213/0x220\n cfg80211_rfkill_block_work+0x1e/0x30\n process_one_work+0x9cf/0x1b70\n worker_thread+0x6c8/0xf10\n kthread+0x3c5/0x780\n ret_from_fork+0x56d/0x700\n ret_from_fork_asm+0x1a/0x30\n \u0026lt;/TASK\u0026gt;\n\nThe problem arises due to the rfkill_block work is not cancelled when wiphy\nis being unregistered. In order to fix the issue cancel the corresponding\nwork in wiphy_unregister().\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.(CVE-2026-23336)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()\n\nl2cap_ecred_reconf_rsp() casts the incoming data to struct\nl2cap_ecred_conn_rsp (the ECRED *connection* response, 8 bytes with\nresult at offset 6) instead of struct l2cap_ecred_reconf_rsp (2 bytes\nwith result at offset 0).\n\nThis causes two problems:\n\n - The sizeof(*rsp) length check requires 8 bytes instead of the\n   correct 2, so valid L2CAP_ECRED_RECONF_RSP packets are rejected\n   with -EPROTO.\n\n - rsp-\u0026gt;result reads from offset 6 instead of offset 0, returning\n   wrong data when the packet is large enough to pass the check.\n\nFix by using the correct type.  Also pass the already byte-swapped\nresult variable to BT_DBG instead of the raw __le16 field.(CVE-2026-43062)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\napparmor: Fix \u0026amp; Optimize table creation from possibly unaligned memory\n\nSource blob may come from userspace and might be unaligned.\nTry to optize the copying process by avoiding unaligned memory accesses.\n\n- Added Fixes tag\n- Added \u0026quot;Fix \u0026amp;\u0026quot; to description as this doesn\u0026apos;t just optimize but fixes\n        a potential unaligned memory access\n[jj: remove duplicate word \u0026quot;convert\u0026quot; in comment trigger checkpatch warning](CVE-2026-45893)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: validate payload size before accessing journal metadata\n\nr5c_recovery_analyze_meta_block() and\nr5l_recovery_verify_data_checksum_for_mb() iterate over payloads in a\njournal metadata block using on-disk payload size fields without\nvalidating them against the remaining space in the metadata block.\n\nA corrupted journal contains payload sizes extending beyond the PAGE_SIZE\nboundary can cause out-of-bounds reads when accessing payload fields or\ncomputing offsets.\n\nAdd bounds validation for each payload type to ensure the full payload\nfits within meta_size before processing.(CVE-2026-46070)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Fix shadow paging use-after-free due to unexpected GFN\n\nThe shadow MMU computes GFNs for direct shadow pages using sp-\u0026gt;gfn plus\nthe SPTE index. This assumption breaks for shadow paging if the guest\npage tables are modified between VM entries (similar to commit\naad885e77496, \u0026quot;KVM: x86/mmu: Drop/zap existing present SPTE even\nwhen creating an MMIO SPTE\u0026quot;, 2026-03-27).  The flow is as follows:\n\n- a PDE is installed for a 2MB mapping, and a page in that area is\n  accessed.  KVM creates a kvm_mmu_page consisting of 512 4KB pages;\n  the kvm_mmu_page is marked by FNAME(fetch) as direct-mapped because\n  the guest\u0026apos;s mapping is a huge page (and thus contiguous).\n\n- the PDE mapping is changed from outside the guest.\n\n- the guest accesses another page in the same 2MB area.  KVM installs\n  a new leaf SPTE and rmap entry; the SPTE uses the \u0026quot;correct\u0026quot; GFN\n  (i.e. based on the new mapping, as changed in the previous step) but\n  that GFN is outside of the [sp-\u0026gt;gfn, sp-\u0026gt;gfn + 511] range; therefore\n  the rmap entry cannot be found and removed when the kvm_mmu_page\n  is zapped.\n\n- the memslot that covers the first 2MB mapping is deleted, and the\n  kvm_mmu_page for the now-invalid GPA is zapped.  However, rmap_remove()\n  only looks at the [sp-\u0026gt;gfn, sp-\u0026gt;gfn + 511] range established in step 1,\n  and fails to find the rmap entry that was recorded by step 3.\n\n- any operation that causes an rmap walk for the same page accessed\n  by step 3 then walks a stale rmap and dereferences a freed kvm_mmu_page.\n  This includes dirty logging or MMU notifier invalidations (e.g., from\n  MADV_DONTNEED).\n\nThe underlying issue is that KVM\u0026apos;s walking of shadow PTEs assumes that\nif a SPTE is present when KVM wants to install a non-leaf SPTE, then the\nexisting kvm_mmu_page must be for the correct gfn.  Because the only way\nfor the gfn to be wrong is if KVM messed up and failed to zap a SPTE...\nwhich shouldn\u0026apos;t happen, but *actually* only happens in response to a\nguest write.\n\nThat bug dates back literally forever, as even the first version of KVM\nassumes that the GFN matches and walks into the \u0026quot;wrong\u0026quot; shadow page.\nHowever, that was only an imprecision until 2032a93d66fa (\u0026quot;KVM: MMU:\nDon\u0026apos;t allocate gfns page for direct mmu pages\u0026quot;) came along.\n\nFix it by checking for a target gfn mismatch and zapping the existing\nSPTE.  That way the old SP and rmap entries are gone, KVM installs\nthe rmap in the right location, and everyone is happy.(CVE-2026-46113)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/flexfiles: reject zero filehandle version count\n\nff_layout_alloc_lseg() decodes the filehandle-version array count\nfrom the flexfiles layout body. The value is used as the count for\nkzalloc_objs(), and the current code only rejects NULL.\n\nA zero count yields ZERO_SIZE_PTR, which can be stored in\ndss_info-\u0026gt;fh_versions even though later flexfiles paths assume that at\nleast one filehandle version exists.\n\nReject fh_count == 0 before the allocation, matching the existing zero\nversion_count validation in the flexfiles GETDEVICEINFO parser.\n\nA QEMU/KASAN run with a malformed flexfiles layout hit:\n\n  KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n  RIP: 0010:ff_layout_encode_ff_layoutupdate.isra.0+0x15f/0x750\n  ff_layout_encode_layoutreturn+0x683/0x970\n  nfs4_xdr_enc_layoutreturn+0x278/0x3a0\n  Kernel panic - not syncing: Fatal exception\n\nThe patched kernel rejects the malformed layout without KASAN/oops/panic,\nand a valid fh_count=1 regression still opens, reads, and unmounts cleanly.(CVE-2026-53392)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()\n\nWhen fbcon_do_set_font() fails (e.g., due to a memory allocation failure\ninside vc_resize() under heavy memory pressure), it jumps to the `err_out`\nlabel to roll back the console state. However, the current rollback logic\nforgets to restore the `hi_font` state, leading to a severe state machine\ncorruption.\n\nEarlier in the function, `set_vc_hi_font()` might be called to change\n`vc-\u0026gt;vc_hi_font_mask` and mutate the screen buffer. If `vc_resize()`\nsubsequently fails, the `err_out` path restores `vc_font.charcount`\nbut entirely skips rolling back the `vc_hi_font_mask` and the screen\nbuffer.\n\nThis mismatch leaves the terminal in a desynchronized state. Because\n`vc_hi_font_mask` remains set, the VT subsystem will still accept\ncharacter indices greater than 255 from userspace and write them to the\nscreen buffer. Subsequent rendering calls (e.g., `fbcon_putcs()`) will\nthen use these inflated indices to access the reverted, 256-character\nfont array, leading to a deterministic out-of-bounds read and potential\nkernel memory disclosure.\n\nFix this by adding the missing rollback logic for the `hi_font` mask\nand screen buffer in the error path.(CVE-2026-53402)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npNFS: Fix use-after-free in pnfs_update_layout()\n\nWhen hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layout(),\nthe code calls pnfs_prepare_to_retry_layoutget(lo). If it succeeds,\npnfs_put_layout_hdr(lo) is called before trace_pnfs_update_layout(),\nwhich still references \u0026apos;lo\u0026apos;. This results in a use-after-free when the\ntracepoint accesses lo\u0026apos;s fields.\n\nFix this by moving the tracepoint call before pnfs_put_layout_hdr(lo).(CVE-2026-63800)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: Prefer NLA_NUL_STRING\n\nThese attributes are evaluated as c-string (passed to strcmp), but\nNLA_STRING doesn\u0026apos;t check for the presence of a \\0 terminator.\n\nEither this needs to switch to nla_strcmp() and needs to adjust printf fmt\nspecifier to not use plain %s, or this needs to use NLA_NUL_STRING.\n\nAs the code has been this way for long time, it seems to me that userspace\ndoes include the terminating nul, even tough its not enforced so far, and\nthus NLA_NUL_STRING use is the simpler solution.(CVE-2026-63860)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mxuport: fix memory corruption with small endpoint\n\nMake sure that the bulk-out endpoint max packet size is at least eight\nbytes to avoid user-controlled slab corruption should a malicious device\nreport a smaller size.(CVE-2026-63899)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: digi_acceleport: fix memory corruption with small endpoints\n\nAdd the missing bulk-out buffer size sanity checks to avoid\nout-of-bounds memory accesses or slab corruption should a malicious\ndevice report smaller buffers than expected.(CVE-2026-63901)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()\n\nipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.\nLet\u0026apos;s recompute nh pointer to make sure any change won\u0026apos;t mess things up.(CVE-2026-63924)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HIDP: fix missing length checks in hidp_input_report()\n\nhidp_input_report() reads keyboard and mouse payload data from an skb\nwithout first verifying that skb-\u0026gt;len contains enough data.\n\nhidp_recv_intr_frame() pulls the 1-byte HIDP header before dispatching\nto hidp_input_report(). If a paired device sends a truncated packet,\nthe handler reads beyond the valid skb data, resulting in an\nout-of-bounds read of skb data. The OOB bytes may be interpreted as\nphantom key presses or spurious mouse movement.\n\nReplace the open-coded length tracking and pointer arithmetic with\nskb_pull_data() calls. skb_pull_data() returns NULL if the requested\nbytes are not present, eliminating the need for a manual size variable\nand the separate skb-\u0026gt;len guard.(CVE-2026-63947)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()\n\nipv6_rpl_srh_decompress() computes:\n\n    outhdr-\u0026gt;hdrlen = (((n + 1) * sizeof(struct in6_addr)) \u0026gt;\u0026gt; 3);\n\nhdrlen is __u8. For n \u0026gt;= 127 the result exceeds 255 and silently\ntruncates. With n=127 (cmpri=15, cmpre=15, pad=0, hdrlen=16):\n\n    (128 * 16) \u0026gt;\u0026gt; 3 = 256, truncated to 0 as __u8\n\nThe caller in ipv6_rpl_srh_rcv() then places the compressed header\nat buf + ((ohdr-\u0026gt;hdrlen + 1) \u0026lt;\u0026lt; 3). With hdrlen=0 this is buf + 8,\nbut the decompressed region occupies buf[0..2055] (8-byte header\nplus 128 full addresses). The compressed header overlaps the\ndecompressed data, and ipv6_rpl_srh_compress() writes into this\noverlap, corrupting the routing header of the forwarded packet.\n\nThe existing guard at exthdrs.c:546 checks (n + 1) \u0026gt; 255, which\nprevents n+1 from overflowing unsigned char (the segments_left\nfield), but does not prevent the computed hdrlen from overflowing\n__u8. n=127 passes because 128 \u0026lt;= 255, yet hdrlen=256 does not\nfit.\n\nTighten the bound to (n + 1) \u0026gt; 127. This caps n at 126, giving\nhdrlen = (127 * 16) \u0026gt;\u0026gt; 3 = 254, which fits in __u8. The compressed\nheader then lands at buf + ((254 + 1) \u0026lt;\u0026lt; 3) = buf + 2040, exactly\npast the decompressed region (buf[0..2039]). No overlap. 127\nsegments is well beyond any realistic RPL deployment.(CVE-2026-63984)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntunnels: do not assume transport header in iptunnel_pmtud_check_icmp()\n\nIn some cases, iptunnel_pmtud_check_icmp() can be called while\nskb transport header is not set.\n\nThis triggers an out-of-bound access, because\n(typeof(skb-\u0026gt;transport_header))~0U is 65535.\n\nAccess the icmp header based on IPv4 network header,\nafter making sure icmp-\u0026gt;type is present in skb linear part.\n\nNote that iptunnel_pmtud_check_icmpv6()) is fine.(CVE-2026-63992)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()\n\nSashiko found that iptunnel_pmtud_build_icmp() and\niptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ipv6_hdr()\nbefore an skb_cow() call which can reallocate skb-\u0026gt;head.\n\nFix this possible UAF by initializing the local variables\nafter the skb_cow() call.\n\nRemove skb_reset_network_header() calls which were not needed.(CVE-2026-63994)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv4: free net-\u0026gt;ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()\n\nipv4_sysctl_exit_net() is currently freeing net-\u0026gt;ipv4.sysctl_local_reserved_ports\ntoo soon.\n\nOnly after unregister_net_sysctl_table() we can be sure no threads can possibly\nuse the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.(CVE-2026-64002)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count\n\nrmi_f30_map_gpios() allocates gpioled_key_map with\nmin(gpioled_count, TRACKSTICK_RANGE_END) == at most 6 entries, but\nrmi_f30_attention() iterates the full f30-\u0026gt;gpioled_count (device query\nregister, range 0..31) and dereferences gpioled_key_map[i], and\ninput-\u0026gt;keycodemax is set to the full gpioled_count while input-\u0026gt;keycode\npoints at the 6-entry allocation.\n\nA device that reports gpioled_count \u0026gt; 6 with GPIO support enabled\ntherefore causes an out-of-bounds read on the attention interrupt and\nout-of-bounds read/write through the EVIOCGKEYCODE/EVIOCSKEYCODE ioctls,\nwhich bound the index only against keycodemax. This is the same defect\nas the F3A handler, which was copied from F30.\n\nSize the keymap for the full gpioled_count; the mapping loop still\nassigns only the first min(gpioled_count, TRACKSTICK_RANGE_END) entries.(CVE-2026-64276)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ni2c: core: fix adapter deregistration race\n\nAdapters can be looked up by their id using i2c_get_adapter() which\ntakes a reference to the embedded struct device.\n\nRemove the adapter from the IDR before tearing it down during\nderegistration (and on registration failure) to make sure its resources\nare not accessed after having been freed (e.g. the device name).(CVE-2026-64279)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nexfat: bound uniname advance in exfat_find_dir_entry()\n\nIn exfat_find_dir_entry(), each TYPE_EXTEND (file name) entry advances the\noutput pointer by a fixed amount while the loop guard only tracks the\naccumulated name length:\n\n\tif (++order == 2)\n\t\tuniname = p_uniname-\u0026gt;name;\n\telse\n\t\tuniname += EXFAT_FILE_NAME_LEN;\n\tlen = exfat_extract_uni_name(ep, entry_uniname);\n\tname_len += len;\n\tunichar = *(uniname+len);\n\t*(uniname+len) = 0x0;\n\nuniname grows by EXFAT_FILE_NAME_LEN (15) per name entry, but name_len\ngrows only by the actual extracted length, which is shorter when a name\nfragment contains an early NUL.  The only guard is\n`name_len \u0026gt;= MAX_NAME_LENGTH`, so a crafted directory with many short\nname fragments lets uniname run far past the\np_uniname-\u0026gt;name[MAX_NAME_LENGTH + 3] buffer while name_len stays small,\ncausing an out-of-bounds read and write at *(uniname+len).\n\nThe sibling extractor exfat_get_uniname_from_ext_entry() already stops\non a short fragment (the lockstep `len != EXFAT_FILE_NAME_LEN` guard\nadded in commit d42334578eba (\u0026quot;exfat: check if filename entries exceeds\nmax filename length\u0026quot;)); exfat_find_dir_entry() never got the\nequivalent.  Track the per-entry write offset as a count and reject a\nfragment once the offset, or the offset plus the extracted length, would\nexceed MAX_NAME_LENGTH, before forming the output pointer.(CVE-2026-64296)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - validate RSA CRT component lengths\n\nThe generic RSA key parser (rsa_helper.c) bounds each CRT component (p,\nq, dp, dq, qinv) by the modulus size n_sz, but qat_rsa_setkey_crt()\nallocates half-size DMA buffers (key_sz / 2) and right-aligns each\ncomponent with:\n\n    memcpy(dst + half_key_sz - len, src, len)\n\nWhen a CRT component is larger than half_key_sz the subtraction\nunderflows and memcpy writes past the DMA buffer, causing memory\ncorruption.\n\nAdd a len \u0026gt; half_key_sz check next to the existing !len check for each\nof the five CRT components so the driver falls back to the non-CRT path\ninstead of writing out of bounds.(CVE-2026-64304)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: digi_acceleport: fix write buffer corruption\n\nThe digi_write_inb_command() is supposed to wait for the write urb to\nbecome available or return an error, but instead it updates the transfer\nbuffer and tries to resubmit the urb on timeout.\n\nTo make things worse, for commands like break control where no timeout\nis used, the driver would corrupt the urb immediately due to a broken\njiffies comparison (on 32-bit machines this takes five minutes of uptime\nto trigger due to INITIAL_JIFFIES).\n\nFix this by adding the missing return on timeout and waiting\nindefinitely when no timeout has been specified as intended.\n\nThis issue was (sort of) flagged by Sashiko when reviewing an unrelated\nchange to the driver.(CVE-2026-64333)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: legousbtower: fix use-after-free on disconnect race\n\nmutex_unlock() may access the mutex structure after releasing the lock\nand therefore cannot be used to manage lifetime of objects directly\n(unlike spinlocks and refcounts). [1][2]\n\nUse a kref to release the driver data to avoid use-after-free in\nmutex_unlock() when release() races with disconnect().\n\n[1] a51749ab34d9 (\u0026quot;locking/mutex: Document that mutex_unlock() is\n                   non-atomic\u0026quot;)\n[2] 2b9d9e0a9ba0 (\u0026quot;locking/mutex: Clarify that mutex_unlock(), and most\n                   other sleeping locks, can still use the lock object\n                   after it\u0026apos;s unlocked\u0026quot;)(CVE-2026-64340)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nproc: protect ptrace_may_access() with exec_update_lock (part 1)\n\nFix the easy cases where procfs currently calls ptrace_may_access() without\nexec_update_lock protection, where the fix is to simply add the extra lock\nor use mm_access():\n\n - do_task_stat(): grab exec_update_lock\n - proc_pid_wchan(): grab exec_update_lock\n - proc_map_files_lookup(): use mm_access() instead of get_task_mm()\n - proc_map_files_readdir(): use mm_access() instead of get_task_mm()\n - proc_ns_get_link(): grab exec_update_lock\n - proc_ns_readlink(): grab exec_update_lock(CVE-2026-64371)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.(CVE-2026-64388)\n\nIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in bt_accept_dequeue(). bt_accept_get() takes a temporary reference before dropping the accept queue lock. bt_accept_dequeue() currently drops that reference before bt_accept_unlink(), leaving only the queue reference. bt_accept_unlink() drops the queue reference. The subsequent sock_hold() therefore accesses freed memory if it was the final reference, as observed by KASAN during listening L2CAP socket cleanup. Retain the temporary queue-walk reference through unlink and hand it to the caller on success. Drop it explicitly on the closed and not-yet-connected paths.(CVE-2026-64406)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: qualcomm: rmnet: validate MAP frame length before ingress parsing\n\nWhen ingress deaggregation is disabled, rmnet_map_ingress_handler() passes\nthe skb straight to __rmnet_map_ingress_handler(), skipping the length\nvalidation that rmnet_map_deaggregate() performs on the aggregated path.\nThe parser then dereferences the MAP header and csum header/trailer based on\nthe on-wire pkt_len without checking skb-\u0026gt;len, so a short frame is read out\nof bounds:\n\n  BUG: KASAN: slab-out-of-bounds in rmnet_map_checksum_downlink_packet\n  Read of size 1 at addr ffff88801118ed00 by task exploit/147\n  Call Trace:\n   ...\n   rmnet_map_checksum_downlink_packet (drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c:413)\n   __rmnet_map_ingress_handler (drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c:96)\n   rmnet_rx_handler (drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c:129)\n   __netif_receive_skb_core.constprop.0 (net/core/dev.c:6089)\n   netif_receive_skb (net/core/dev.c:6460)\n   tun_get_user (drivers/net/tun.c:1955)\n   tun_chr_write_iter (drivers/net/tun.c:2001)\n   vfs_write (fs/read_write.c:688)\n   ksys_write (fs/read_write.c:740)\n   do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n   ...\n\nFactor that validation out of rmnet_map_deaggregate() into\nrmnet_map_validate_packet_len() and run it on the no-aggregation path too.\nThe MAP header is bounds-checked first, since this path can receive a frame\nshorter than the header.(CVE-2026-64550)\n\nIn the Linux kernel, a use-after-free vulnerability exists in the SCTP ASCONF processing. sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf-\u0026gt;transport. For an ASCONF located through its Address Parameter by __sctp_rcv_asconf_lookup(), that cached transport corresponds to the Address Parameter, which need not be the packet\u0026apos;s source address. sctp_process_asconf_param() rejects a DEL-IP for the packet source address, but nothing protects asconf-\u0026gt;transport. A single ASCONF can carry [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0] where L differs from the source, causing the freed transport to be dereferenced, potentially leading to system crash or code execution.(CVE-2026-64564)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: defer destroy_previous_session() until after NTLM authentication\n\nIn ntlm_authenticate(), destroy_previous_session() is called using a\nuser pointer resolved from the client-supplied NTLM blob username field\nbefore the NTLMv2 response is validated. An authenticated attacker can\nset the NTLM blob username to match a victim account and set\nPreviousSessionId to the victim\u0026apos;s session ID; destroy_previous_session()\ndestroys the victim\u0026apos;s session while ksmbd_decode_ntlmssp_auth_blob()\nsubsequently rejects the request with -EPERM.\n\nMove destroy_previous_session() and the prev_id assignment to after\nksmbd_decode_ntlmssp_auth_blob() returns success and use sess-\u0026gt;user\nrather than the pre-authentication lookup result. This matches the\nordering already used by krb5_authenticate(), where\ndestroy_previous_session() is called only after\nksmbd_krb5_authenticate() returns success.(CVE-2026-68130)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE\n\n__decode_pg_temp() decodes an user-controlled length but only rejects\nvalues large enough to overflow the allocation; it does not bound it to\nCEPH_PG_MAX_SIZE. The helper backs both pg_temp and pg_upmap decoding, and\napply_upmap()/get_temp_osds() later copy the decoded list into the fixed-size\non-stack array struct ceph_osds.osds[CEPH_PG_MAX_SIZE]. A monitor that sends\nan OSDMap with a pg_temp/pg_upmap entry longer than 32 thus causes a stack\nout-of-bounds write.\n\nAn OSD set for a single PG can never exceed CEPH_PG_MAX_SIZE, so reject longer\nentries at decode time. The bound is well below the old overflow threshold, so\nit also covers the allocation-size overflow the previous check guarded against.\n\n  BUG: KASAN: stack-out-of-bounds in ceph_pg_to_up_acting_osds\n  Write of size 4 ... by task exploit\n   kasan_report (mm/kasan/report.c:595)\n   ceph_pg_to_up_acting_osds (net/ceph/osdmap.c:2617 net/ceph/osdmap.c:2833)\n   calc_target (net/ceph/osd_client.c:1638)\n   __submit_request (net/ceph/osd_client.c:2394)\n   ceph_osdc_start_request (net/ceph/osd_client.c:2490)\n   ceph_osdc_call (net/ceph/osd_client.c:5164)\n   rbd_dev_image_probe (drivers/block/rbd.c:6899)\n   do_rbd_add (drivers/block/rbd.c:7138)\n   ...\n  kernel BUG at net/ceph/osdmap.c:2670!\n\n[ idryomov: do the same in __decode_pg_upmap_items() ](CVE-2026-68159)","status":"published","published":"2026-08-20T09:59:07Z","modified":"2026-08-20T10:15:04.961461287Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"UBUNTU-CVE-2026-64388","description":"In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or CIFS_MOUNT_MODE_FROM_SID were also explicitly set. Fix this by checking for posix_extensions in cifs_setattr_nounix() when updating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map and set the ownership/group information on the server.","status":"published","published":"2026-07-25T10:17:00Z","modified":"2026-11-10T02:51:09.254179876Z","cvss":[{"version":"4.0","score":2.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-10T03:19:50.803247Z"},{"id":"AZL-93753","title":"CVE-2026-64388 affecting package kernel 6.6.161.1-1","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix chown/chgrp with SMB3 POSIX Extensions\n\nOwnership (chown) and group (chgrp) modifications were being ignored when\nmounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or\nCIFS_MOUNT_MODE_FROM_SID were also explicitly set.\n\nFix this by checking for posix_extensions in cifs_setattr_nounix() when\nupdating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map\nand set the ownership/group information on the server.","status":"published","published":"2026-07-25T10:17:22Z","modified":"2026-11-05T14:16:42.098271434Z","updated_at":"2026-11-05T16:41:25.880689Z"},{"id":"openSUSE-SU-2026:11476-1","title":"kernel-devel-7.1.7-1.1 on GA media","description":"These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-09T00:00:00Z","modified":"2026-08-10T08:15:09.32794292Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:22091-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T15:44:43Z","modified":"2026-10-19T17:23:14.488875612Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-64388","title":"CVE-2026-64388 in linux - Patched by Root","description":"Root has patched CVE-2026-64388 in the linux package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-18T03:18:11Z","modified":"2026-10-18T04:17:44.56937649Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"ROOT-OS-UBUNTU-2204-CVE-2026-64388","title":"CVE-2026-64388 in linux - Patched by Root","description":"Root has patched CVE-2026-64388 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.","status":"published","published":"2026-11-06T13:52:25Z","modified":"2026-11-06T14:15:41.706349158Z","updated_at":"2026-11-06T14:57:23.799159Z"},{"id":"SUSE-SU-2026:23477-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T12:54:32Z","modified":"2026-09-14T18:23:16.721468657Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23481-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731) \t  \n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T13:00:49Z","modified":"2026-09-14T18:23:13.340667208Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23528-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T10:34:26Z","modified":"2026-09-15T18:23:09.824440367Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:23529-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).\n- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731) \t  \n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert \"drm/amdgpu: fix aperture mapping leak\" (git-fixes).\n- Revert \"media: v4l2-dev: fix error handling in __video_register_device()\" (git-fixes).\n- Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\" (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-08T11:00:17Z","modified":"2026-09-15T18:23:09.921123083Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:24179-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T13:24:33Z","modified":"2026-10-20T17:23:58.081470941Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24184-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T13:51:59Z","modified":"2026-10-20T17:24:00.253930144Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24197-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T14:15:17Z","modified":"2026-10-21T17:23:09.534105524Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24235-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T13:51:59Z","modified":"2026-10-21T17:23:12.046754854Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4120-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43014: net: macb: properly unregister fixed rate clocks (bsc#1264012).\n- CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53142: drm/xe/display: fix oops in suspend/shutdown without display (bsc#1269402).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53180: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-53263: 6lowpan: fix off-by-one in multicast context address compression (bsc#1269647).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63995: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033).\n- CVE-2026-63996: ethtool: cmis: require exact CDB reply length (bsc#1273032).\n- CVE-2026-63997: ethtool: module: avoid leaking a netdev ref on module flash errors (bsc#1273036).\n- CVE-2026-63998: ethtool: module: call ethnl_ops_complete() on module flash errors (bsc#1273037).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64033: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64055: net: ethernet: cortina: Drop half-assembled SKB (bsc#1272893).\n- CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64099: drm/v3d: Fix use-after-free of CPU job query arrays on error path (bsc#1273465).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64136: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (bsc#1272351).\n- CVE-2026-64146: erofs: fix metabuf leak in inode xattr initialization (bsc#1273681).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64180: mm/memory_hotplug: fix memory block reference leak on remove (bsc#1273679).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64224: octeontx2-pf: fix double free in rvu_rep_rsrc_init() (bsc#1272804).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64244: drivers/base/memory: set mem-\u003ealtmap after successful device registration (bsc#1273812).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64269: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg (bsc#1273280).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64452: 6lowpan: fix NHC entry use-after-free on error path (bsc#1273460).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64477: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (bsc#1274264).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64515: wifi: mac80211: fix MLE defragmentation (bsc#1273859).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64569: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n (bsc#1274009).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68105: drm/amdgpu: Fix kernel panic during driver load failure (bsc#1274849).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68124: mctp: serial: handle zero-length frames to prevent rx buffer overflow (bsc#1275192).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68135: net: hip04: fix RX buffer leak on build_skb failure (bsc#1275557).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68152: amt: fix use-after-free in AMT delayed works (bsc#1275300).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68267: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (bsc#1275139).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68302: amt: re-read skb header pointers after every pull (bsc#1275081).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68375: bnxt_en: Handle partially initialized auxiliary devices (bsc#1274835).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72032: net/mlx5: HWS, fix matcher leak on resize target setup failure (bsc#1276955).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72046: gve: fix header buffer corruption with header-split and HW-GRO (bsc#1275519).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72497: RDMA/bnxt_re: Add a max slot check for SQ (bsc#1276913).\n- CVE-2026-72498: RDMA/bnxt_re: Avoid displaying the kernel pointer (bsc#1276912).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72500: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown (bsc#1276552).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74577: net: mpls: initialize rtm_tos in mpls_getroute() (bsc#1275572).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74712: vdpa/mlx5: Fix buffer length in create_direct_keys() (bsc#1276577).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: APEI: Fix ERST timeout unit conversion (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: control: Don't add invalid kcontrols to LED layer (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: scarlett2: Use a private URB for the notification endpoint (git-fixes).\n- ALSA: seq: Don't leak the extension cell pointer in the bounce payload (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- arm64: Exclude nohz_full CPUs from 32bits el0 support (bsc#1269313).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- ASoC: hdac_hda: Fix hlink refcount leak on component registration failure (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1017-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtk: Do not discard the subsystem reset timeout (git-fixes).\n- Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() (stable-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378 (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: fix the SCO setup context lifetime (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bnxt_en: Adjust TX rings if reservation is less than requested (jsc#PED-16798).\n- bnxt_en: Delay for 5 seconds after AER DPC for all chips (jsc#PED-16798).\n- bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() (jsc#PED-16798).\n- bnxt_en: Drop pci_save_state() after pci_restore_state() (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction for V3_CMP (jsc#PED-16798).\n- bnxt_en: Move bnxt_rss_ext_op into header (jsc#PED-16798).\n- bnxt_en: Refactor some basic ring setup and adjustment logic (jsc#PED-16798).\n- bnxt_en: Restore default stat ctxs for ULP when resource is available (jsc#PED-16798).\n- bnxt_en: Set bp-\u003emax_tpa according to what the FW supports (jsc#PED-16798).\n- bnxt_en: Use absolute target ns from ptp_clock_request (jsc#PED-16798).\n- bnxt_en: use bnxt_xdp_buff for xdp context (jsc#PED-16798).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use CPPC to get scaling factors (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use HYBRID_SCALING_FACTOR_ADL for Bartlett Lake (bsc#1240957 bsc#1249104 bsc#1265220).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: Add AV mute wait frames to dce110_set_avmute (stable-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/display: Check for tg ops in dce110_set_avmute (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE (git-fixes).\n- drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() (git-fixes).\n- drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames (stable-fixes).\n- drm/amd/display: Remove unused-but-set variable hubp from (git-fixes).\n- drm/amd/display: validate plane degamma LUT size for private color prop (git-fixes).\n- drm/amd/pm: adjust the visibility of pp_table sysfs node (stable-fixes).\n- drm/amd/pm: Use same metric table for APU (stable-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: fix nbif 6.3.1 l1 low power not functional (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini (git-fixes).\n- drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12 (git-fixes).\n- drm/amdgpu: reject oversized IBs with per-ring packet limits (stable-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: remove unused function parameter (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore (git-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector/hdmi: Fix out of bounds memory read (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/i915/hdcp: check streams bounds before overflow (git-fixes).\n- drm/i915/hdcp: Move to using intel_display in intel_hdcp (stable-fixes).\n- drm/i915/hdcp: require monotonically increasing seq_num_v (git-fixes).\n- drm/i915/hdcp: Skip inactive MST connectors when building stream list (stable-fixes).\n- drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() (stable-fixes).\n- drm/i915/vrr: require valid min/max vfreq for VRR (git-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/a6xx: Fix RBBM_CLOCK_CNTL3_TP0 value in a730_hwcg (git-fixes).\n- drm/msm/a6xx: Fix stale rpmh votes after suspend (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/panthor: fix firmware control interface bounds checks (git-fixes).\n- drm/panthor: return PTR_ERR() from devm_drm_dev_alloc() (git-fixes).\n- drm/panthor: skip zero-sized firmware sections (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates in ssd133x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: hdmi: Don't leak sync polarity bits into packet control (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm/xe/oa: Check managed mutex initialization errors (git-fixes).\n- drm/xe/oa: Fix sync entry leak on OA config emit failure (git-fixes).\n- drm/xe: Introduce xe_gt_dbg_printer() (stable-fixes).\n- drm/xe: Order ring writes before ring tail updates (git-fixes).\n- drm/xe: Stub out new pagefault layer (stable-fixes).\n- drm/xe: tests: fix error message in xe_migrate_sanity_test() (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: core: fix debugfs UAF on adapter removal (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: Fix potential UAF in i3c_device_uevent() (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- kthread: Default affine kthread to its preferred NUMA node (bsc#1269313).\n- kthread: Make sure kthread hasn't started while binding it (bsc#1269313).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: PPC: Book3S HV: Add support for compat CPU capabilities for KVM on PowerNV (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Implement compat CPU capability retrieval for KVM on PowerVM (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode (bsc#1263864 ltc#217835).\n- KVM: PPC: Document KVM_PPC_GET_COMPAT_CAPS ioctl (bsc#1263864 ltc#217835).\n- KVM: PPC: Introduce KVM_CAP_PPC_COMPAT_CAPS and wire up ioctl (bsc#1263864 ltc#217835).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: amphion: Remove obsolete frame_count check in venc_start_session (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: imx219: Rename VTS to FRM_LENGTH (stable-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: i2c: rdacm21: Fix missing media_entity_cleanup() (git-fixes).\n- media: imx219: Fix maximum frame length in lines (git-fixes).\n- media: intel/ipu6: fix async notifier cleanup leak on parse error (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-async: avoid deleting unlinked ASC entry on link error (git-fixes).\n- media: v4l2-async: Unregister sub-device if asc_list is empty (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- mm: Create/affine kcompactd to its preferred node (bsc#1269313).\n- mm: Create/affine kswapd to its preferred node (bsc#1269313).\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86/amd/hsmp: Reject negative power cap writes in hwmon (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS (git-fixes).\n- platform/x86: hp-bioscfg: advance elem past consumed array elements (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read on empty password write (git-fixes).\n- platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password (git-fixes).\n- platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() (git-fixes).\n- platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed (git-fixes).\n- platform/x86: hp-bioscfg: fix password encoding bounds check (git-fixes).\n- platform/x86: hp-bioscfg: warn on element type mismatch instead of failing (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Add a NULL check for sst_inst (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Return error during profile addition (git-fixes).\n- platform/x86: ISST: Use PP level enable mask (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate parameter for core power state (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors (bsc#1263864 ltc#217835).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (bsc#1263864 ltc#217835).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (bsc#1263864 ltc#217835).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert 'drm/amdgpu: fix aperture mapping leak' (git-fixes).\n- Revert 'media: v4l2-dev: fix error handling in __video_register_device()' (git-fixes).\n- Revert 'thermal/drivers/hwmon: Cleanup coding style a bit' (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- sched,arm64: Handle CPU isolation on last resort fallback rq (bsc#1269313).\n- scsi: fnic: Abort timed-out NVMe LS requests (bsc#1236344).\n- scsi: fnic: Add FDLS role handling for NVMe initiators (bsc#1236344).\n- scsi: fnic: Add the NVMe/FC transport path (bsc#1236344).\n- scsi: fnic: Advertise NVMe initiator service parameters (bsc#1236344).\n- scsi: fnic: Bump up version number (bsc#1236344).\n- scsi: fnic: Decode firmware role configuration (bsc#1236344).\n- scsi: fnic: Do not use GFP_ZERO for mempools (bsc#1236344).\n- scsi: fnic: Expose NVMe transport state in debugfs (bsc#1236344).\n- scsi: fnic: Handle NVMe LS frames in FDLS (bsc#1236344).\n- scsi: fnic: Make debug logging protocol independent (bsc#1236344).\n- scsi: fnic: Make fnic_queuecommand() easier to analyze (bsc#1236344).\n- scsi: fnic: Refactor in_remove flag and call to fnic_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Remove a useless struct mempool forward declaration (bsc#1236344).\n- scsi: fnic: Rename fnic_scsi_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Route completions and resets by initiator role (bsc#1236344).\n- scsi: fnic: Self-assignment of intr_time_type has no effect (bsc#1236344).\n- scsi: fnic: Send NVMe LS requests through FDLS (bsc#1236344).\n- scsi: fnic: Switch to use %ptSp (bsc#1236344).\n- scsi: fnic: Track NVMe transport statistics (bsc#1236344).\n- scsi: fnic: Use fnic_num for non-SCSI identifiers (bsc#1236344).\n- scsi: fnic: Use mempool for receive frames (bsc#1236344).\n- scsi: qla2xxx: Declare qla2xxx_mqueuecommand() static (bsc#1275737).\n- scsi: qla2xxx: Use nr_cpu_ids instead of NR_CPUS for qp_cpu_map allocation (bsc#1275737).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: fix of_node_put() on VIP parse errors (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: Fix bandwidth group reservation indexing (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uaccess: add copy_struct_to_user helper (bsc#1263864 ltc#217835).\n- uaccess: fix ignored_trailing logic in copy_struct_to_user() (bsc#1263864 ltc#217835).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive() (git-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: disconnect on CSA to channel 0 (git-fixes).\n- wifi: mac80211: fix multi-link element inheritance (git-fixes).\n- wifi: mac80211: fix per-STA profile length in cross-link CSA parsing (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (bsc#1240957 bsc#1249104 bsc#1265220).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-09-10T09:31:34Z","modified":"2026-09-14T18:23:14.868358938Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4254-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).\n- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).\n- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).\n- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).\n- CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).\n- CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).\n- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).\n- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).\n- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).\n- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).\n- CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).\n- CVE-2026-53094: bpf: Fix stale offload-\u003eprog pointer after constant blinding (bsc#1269965).\n- CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167).\n- CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635).\n- CVE-2026-53142: drm/xe/display: fix oops in suspend/shutdown without display (bsc#1269402).\n- CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53180: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888).\n- CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53263: 6lowpan: fix off-by-one in multicast context address compression (bsc#1269647).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).\n- CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090).\n- CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108).\n- CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251).\n- CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63923: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (bsc#1273005).\n- CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).\n- CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63980: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).\n- CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-63995: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033).\n- CVE-2026-63996: ethtool: cmis: require exact CDB reply length (bsc#1273032).\n- CVE-2026-63997: ethtool: module: avoid leaking a netdev ref on module flash errors (bsc#1273036).\n- CVE-2026-63998: ethtool: module: call ethnl_ops_complete() on module flash errors (bsc#1273037).\n- CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64033: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).\n- CVE-2026-64055,CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893).\n- CVE-2026-64055: net: ethernet: cortina: Drop half-assembled SKB (bsc#1272893).\n- CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64099: drm/v3d: Fix use-after-free of CPU job query arrays on error path (bsc#1273465).\n- CVE-2026-64102: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).\n- CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).\n- CVE-2026-64136: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (bsc#1272351).\n- CVE-2026-64146: erofs: fix metabuf leak in inode xattr initialization (bsc#1273681).\n- CVE-2026-64148: pds_core: check health in devcmd wait (bsc#1273956).\n- CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957).\n- CVE-2026-64180: mm/memory_hotplug: fix memory block reference leak on remove (bsc#1273679).\n- CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200).\n- CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (bsc#1272150).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213).\n- CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()\n  (bsc#1272799).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64222: octeontx2-pf: avoid double free of pool-\u003estack on AQ init failure (bsc#1272788).\n- CVE-2026-64224: octeontx2-pf: fix double free in rvu_rep_rsrc_init() (bsc#1272804).\n- CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786).\n- CVE-2026-64244: drivers/base/memory: set mem-\u003ealtmap after successful device registration (bsc#1273812).\n- CVE-2026-64245: fbdev: modedb: fix a possible UAF in fb_find_mode() (bsc#1273905).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64269: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg (bsc#1273280).\n- CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058).\n- CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325).\n- CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525).\n- CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028).\n- CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64452: 6lowpan: fix NHC entry use-after-free on error path (bsc#1273460).\n- CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273).\n- CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075).\n- CVE-2026-64477: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (bsc#1274264).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64515: wifi: mac80211: fix MLE defragmentation (bsc#1273859).\n- CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289).\n- CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318).\n- CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64569: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n (bsc#1274009).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68081: KVM: nVMX: Add helper to put (unmap) vmcs12 pages (bsc#1274580).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713).\n- CVE-2026-68105: drm/amdgpu: Fix kernel panic during driver load failure (bsc#1274849).\n- CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169).\n- CVE-2026-68124: mctp: serial: handle zero-length frames to prevent rx buffer overflow (bsc#1275192).\n- CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553).\n- CVE-2026-68135: net: hip04: fix RX buffer leak on build_skb failure (bsc#1275557).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578).\n- CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584).\n- CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294).\n- CVE-2026-68152: amt: fix use-after-free in AMT delayed works (bsc#1275300).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892).\n- CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68247: drm/i915/bios: range check LFP Data Block panel_type2 (bsc#1275817).\n- CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR (bsc#1275150).\n- CVE-2026-68267: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (bsc#1275139).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973).\n- CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975).\n- CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976).\n- CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091).\n- CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68302: amt: re-read skb header pointers after every pull (bsc#1275081).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656).\n- CVE-2026-68324: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (bsc#1274649).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642).\n- CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644).\n- CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640).\n- CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68375: bnxt_en: Handle partially initialized auxiliary devices (bsc#1274835).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690).\n- CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698).\n- CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68470: wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (bsc#1276500).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72032: net/mlx5: HWS, fix matcher leak on resize target setup failure (bsc#1276955).\n- CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72046: gve: fix header buffer corruption with header-split and HW-GRO (bsc#1275519).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160).\n- CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72341: net/mlx5e: Fix publication race for priv-\u003echannel_stats[] (bsc#1277660).\n- CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775).\n- CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-72464: xprtrdma: Remove temp allocation of rpcrdma_rep objects (bsc#1277069).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059).\n- CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047).\n- CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037).\n- CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941).\n- CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937).\n- CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails (bsc#1276943).\n- CVE-2026-72497: RDMA/bnxt_re: Add a max slot check for SQ (bsc#1276913).\n- CVE-2026-72498: RDMA/bnxt_re: Avoid displaying the kernel pointer (bsc#1276912).\n- CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551).\n- CVE-2026-72500: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown (bsc#1276552).\n- CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864).\n- CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74509: Bluetooth: hci_sync: Fix advertising data UAFs (bsc#1275946).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574).\n- CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566).\n- CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569).\n- CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561).\n- CVE-2026-74577: net: mpls: initialize rtm_tos in mpls_getroute() (bsc#1275572).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74712: vdpa/mlx5: Fix buffer length in create_direct_keys() (bsc#1276577).\n- CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569).\n- CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561).\n- CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80654: soc: xilinx: Shutdown and free rx mailbox channel (bsc#1277516).\n- CVE-2026-90082: net: mana: Cap MSI-X vectors to the device MSI-X table size \n\nThe following non security issues were fixed:\n\n- accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes).\n- accessibility: speakup: unregister tty ldisc on later init failures (git-fixes).\n- ACPI: APEI: Fix ERST timeout unit conversion (git-fixes).\n- ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes).\n- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes).\n- ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes).\n- ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes).\n- ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes).\n- ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes).\n- ACPI: video: Release PCI device reference after lookup (git-fixes).\n- add my missing Reviewed-by: tag.\n- ALSA: 6fire: bound the MIDI event length from the device (git-fixes).\n- ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes).\n- ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes).\n- ALSA: control: Don't add invalid kcontrols to LED layer (git-fixes).\n- ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes).\n- ALSA: dummy: Check card index validity at probe (stable-fixes).\n- ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes).\n- ALSA: hda: Fix connection list comparison in proc output (git-fixes).\n- ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes).\n- ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes).\n- ALSA: scarlett2: Use a private URB for the notification endpoint (git-fixes).\n- ALSA: seq: Don't leak the extension cell pointer in the bounce payload (git-fixes).\n- ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes).\n- ALSA: seq: midi: Serialize input teardown with event_input (git-fixes).\n- ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes).\n- ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes).\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes).\n- ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes).\n- ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes).\n- ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes).\n- apparmor: advertise the tcp fast open fix is applied (git-fixes).\n- arm64: Exclude nohz_full CPUs from 32bits el0 support (bsc#1269313).\n- ASoC: adau1761: sort the register default table (git-fixes).\n- ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes).\n- ASoC: apple: mca: increase SERDES reset delay (git-fixes).\n- ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes).\n- ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes).\n- ASoC: cs35l41: sort the register default table (git-fixes).\n- ASoC: cs35l45: sort the register default table (git-fixes).\n- ASoC: cs4265: sort the register default table (git-fixes).\n- ASoC: cx2072x: sort the register default table (git-fixes).\n- ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes).\n- ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes).\n- ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes).\n- ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes).\n- ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes).\n- ASoC: fsl_easrc: sort the register default table (git-fixes).\n- ASoC: hdac_hda: Fix hlink refcount leak on component registration failure (git-fixes).\n- AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes).\n- ASoC: max9860: sort the register default table (git-fixes).\n- ASoC: meson: Keep link pointers valid on realloc failure (git-fixes).\n- ASoC: ml26124: sort the register default table (git-fixes).\n- ASoC: pcm512x: sort the register default table (git-fixes).\n- ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes).\n- ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes).\n- ASoC: rt274: sort the register default table (git-fixes).\n- ASoC: rt286: sort the register default table (git-fixes).\n- ASoC: rt298: sort the register default table (git-fixes).\n- ASoC: rt700-sdw: always drain jack work on remove (git-fixes).\n- ASoC: rt700: drop duplicate reg_default entry (git-fixes).\n- ASoC: rt700: sort the register default table (git-fixes).\n- ASoC: rt711-sdca: sort the register default tables (git-fixes).\n- ASoC: rt711: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-dmic: sort the register default table (git-fixes).\n- ASoC: rt712-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes).\n- ASoC: rt715-sdca: sort the register default tables (git-fixes).\n- ASoC: rt715: sort the register default table (git-fixes).\n- ASoC: rt1017-sdca-sdw: sort the register default table (git-fixes).\n- ASoC: rt1316-sdw: sort the register default table (git-fixes).\n- ASoC: rt1318-sdw: sort the register default table (git-fixes).\n- ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes).\n- ASoC: sgtl5000: sort the register default table (git-fixes).\n- ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes).\n- ASoC: sof: pcm: use snd_pcm_direction_name() (stable-fixes).\n- ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes).\n- ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes).\n- ASoC: SOF: validate topology volume range before allocation (git-fixes).\n- ASoC: sti-sas: sort the register default table (git-fixes).\n- ASoC: tas2552: sort the register default table (git-fixes).\n- ASoC: tas2764: sort the register default table (git-fixes).\n- ASoC: tas2780: sort the register default table (git-fixes).\n- ASoC: tegra210_i2s: sort the register default table (git-fixes).\n- ASoC: tegra210_mixer: sort the register default table (git-fixes).\n- ASoC: tegra: Fix the MIXER enable default value (git-fixes).\n- ASoC: tegra: Sort MBDRC register defaults (git-fixes).\n- ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes).\n- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes).\n- batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes).\n- batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes).\n- batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes).\n- batman-adv: fix stale receive device on merged fragments (git-fixes).\n- Bluetooth: btintel: Fix diagnostics event detection (git-fixes).\n- Bluetooth: btmtk: Do not discard the subsystem reset timeout (git-fixes).\n- Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() (stable-fixes).\n- Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes).\n- Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes).\n- Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes).\n- Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes).\n- Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes).\n- Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes).\n- Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378 (git-fixes).\n- Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_conn: fix the SCO setup context lifetime (git-fixes).\n- Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes).\n- Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes).\n- Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb (git-fixes).\n- Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes).\n- Bluetooth: hci_event: fix LE list UAF on reset (git-fixes).\n- Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes).\n- Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes).\n- Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request (git-fixes).\n- Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes).\n- Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes).\n- Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes).\n- Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes).\n- Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes).\n- Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes).\n- Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes).\n- Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes).\n- Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes).\n- Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes).\n- bnxt_en: Adjust TX rings if reservation is less than requested (jsc#PED-16798).\n- bnxt_en: Delay for 5 seconds after AER DPC for all chips (jsc#PED-16798).\n- bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() (jsc#PED-16798).\n- bnxt_en: Drop pci_save_state() after pci_restore_state() (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction (jsc#PED-16798).\n- bnxt_en: Implement XDP RSS hash metadata extraction for V3_CMP (jsc#PED-16798).\n- bnxt_en: Move bnxt_rss_ext_op into header (jsc#PED-16798).\n- bnxt_en: Refactor some basic ring setup and adjustment logic (jsc#PED-16798).\n- bnxt_en: Restore default stat ctxs for ULP when resource is available (jsc#PED-16798).\n- bnxt_en: Set bp-\u003emax_tpa according to what the FW supports (jsc#PED-16798).\n- bnxt_en: Use absolute target ns from ptp_clock_request (jsc#PED-16798).\n- bnxt_en: use bnxt_xdp_buff for xdp context (jsc#PED-16798).\n- bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes).\n- bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes).\n- bus: ti-sysc: Fix /chosen node reference leak (git-fixes).\n- cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes).\n- can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes).\n- cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use CPPC to get scaling factors (bsc#1240957 bsc#1249104 bsc#1265220).\n- cpufreq: intel_pstate: Use HYBRID_SCALING_FACTOR_ADL for Bartlett Lake (bsc#1240957 bsc#1249104 bsc#1265220).\n- crypto: aspeed - Propagate platform_get_irq() errors (git-fixes).\n- crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes).\n- crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes).\n- crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes).\n- crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes).\n- crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes).\n- crypto: doc - Remove extra parenthesis (git-fixes).\n- crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes).\n- crypto: keembay - Initialize completion before requesting IRQ (git-fixes).\n- crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes).\n- crypto: mxs-dcp - fix source scatterlist length access (git-fixes).\n- crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes).\n- crypto: qat - clear AES key schedule from stack (git-fixes).\n- crypto: qce - fix CCM AAD buffer underallocation (git-fixes).\n- crypto: qce - fix error path in devm_qce_register_algs (git-fixes).\n- crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes).\n- crypto: sa2ul - stop probe if context pool creation fails (git-fixes).\n- crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes).\n- device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes).\n- dmaengine: dw-edma: Clear stale requests on termination (git-fixes).\n- dmaengine: dw-edma: Complete descriptors before pausing (git-fixes).\n- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes).\n- dmaengine: dw-edma: Serialize abort state updates (git-fixes).\n- dmaengine: dw-edma: Serialize channel state checks (git-fixes).\n- dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes).\n- dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes).\n- dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes).\n- dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes).\n- driver core: soc: Unregister bus on early device registration failure (git-fixes).\n- drm/amd/display: Add AV mute wait frames to dce110_set_avmute (stable-fixes).\n- drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes).\n- drm/amd/display: Check for tg ops in dce110_set_avmute (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix (git-fixes).\n- drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE (git-fixes).\n- drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() (git-fixes).\n- drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames (stable-fixes).\n- drm/amd/display: Remove unused-but-set variable hubp from (git-fixes).\n- drm/amd/display: validate plane degamma LUT size for private color prop (git-fixes).\n- drm/amd/pm: adjust the visibility of pp_table sysfs node (stable-fixes).\n- drm/amd/pm: Use same metric table for APU (stable-fixes).\n- drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes).\n- drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes).\n- drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes).\n- drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes).\n- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes).\n- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes).\n- drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes).\n- drm/amdgpu: check ASPM on the dGPU host link (git-fixes).\n- drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes).\n- drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes).\n- drm/amdgpu: fix autosuspend cleanup during removal (git-fixes).\n- drm/amdgpu: fix nbif 6.3.1 l1 low power not functional (git-fixes).\n- drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes).\n- drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes).\n- drm/amdgpu: Fix UVD min buffer sizes (stable-fixes).\n- drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes).\n- drm/amdgpu: Implement insert_end for VCE 3 (git-fixes).\n- drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini (git-fixes).\n- drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12 (git-fixes).\n- drm/amdgpu: reject oversized IBs with per-ring packet limits (stable-fixes).\n- drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes).\n- drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes).\n- drm/amdgpu: remove unused function parameter (stable-fixes).\n- drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes).\n- drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes).\n- drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes).\n- drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes).\n- drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore (git-fixes).\n- drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes).\n- drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes).\n- drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes).\n- drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes).\n- drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes).\n- drm/connector/hdmi: Fix out of bounds memory read (git-fixes).\n- drm/connector: Fix epoch_counter docs to reflect reality (git-fixes).\n- drm/hibmc: Fix list of formats on the primary plane (git-fixes).\n- drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes).\n- drm/i915/fbc: Extract intel_fbc_has_fences() (stable-fixes).\n- drm/i915/hdcp: check streams bounds before overflow (git-fixes).\n- drm/i915/hdcp: Move to using intel_display in intel_hdcp (stable-fixes).\n- drm/i915/hdcp: require monotonically increasing seq_num_v (git-fixes).\n- drm/i915/hdcp: Skip inactive MST connectors when building stream list (stable-fixes).\n- drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() (stable-fixes).\n- drm/i915/vrr: require valid min/max vfreq for VRR (git-fixes).\n- drm/lima: call drm_mm_init() with a valid allocation range (git-fixes).\n- drm/msm/a6xx: Fix RBBM_CLOCK_CNTL3_TP0 value in a730_hwcg (git-fixes).\n- drm/msm/a6xx: Fix stale rpmh votes after suspend (git-fixes).\n- drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes).\n- drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes).\n- drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes).\n- drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes).\n- drm/panthor: fix firmware control interface bounds checks (git-fixes).\n- drm/panthor: return PTR_ERR() from devm_drm_dev_alloc() (git-fixes).\n- drm/panthor: skip zero-sized firmware sections (git-fixes).\n- drm/radeon: fix autosuspend cleanup during teardown (git-fixes).\n- drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes).\n- drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes).\n- drm/ssd130x: fix column and row end address in partial updates in ssd133x (git-fixes).\n- drm/sun4i: crtc: Propagate layer initialization error (git-fixes).\n- drm/sun4i: Drop node references while building component list (git-fixes).\n- drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes).\n- drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes).\n- drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes).\n- drm/sun4i: hdmi: Don't leak sync polarity bits into packet control (git-fixes).\n- drm/sun4i: tcon: Drop remote endpoint reference (git-fixes).\n- drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes).\n- drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes).\n- drm/sun4i: vi scaler: Fix coefficient selection (git-fixes).\n- drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes).\n- drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (git-fixes).\n- drm/tve200: add OF module alias for autoloading (git-fixes).\n- drm/xe/oa: Check managed mutex initialization errors (git-fixes).\n- drm/xe/oa: Fix sync entry leak on OA config emit failure (git-fixes).\n- drm/xe: Introduce xe_gt_dbg_printer() (stable-fixes).\n- drm/xe: Order ring writes before ring tail updates (git-fixes).\n- drm/xe: Stub out new pagefault layer (stable-fixes).\n- drm/xe: tests: fix error message in xe_migrate_sanity_test() (git-fixes).\n- drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes).\n- drm: lcdif: Wait for vblank before disabling DMA (git-fixes).\n- drm: Remove unused header in drm_dumb_buffers.c (git-fixes).\n- ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes).\n- fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes).\n- fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes).\n- fbdev: kyro: Validate overlay viewport coordinates (git-fixes).\n- fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes).\n- fbdev: ssd1307fb: defer I2C transfers from damage callbacks (git-fixes).\n- fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes).\n- fbdev: uvesafb: unregister connector callback on init failure (git-fixes).\n- firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes).\n- firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes).\n- firmware: arm_scmi: Fix requested device removal race (git-fixes).\n- firmware: arm_scmi: Free transport channel on IDR failure (git-fixes).\n- firmware: arm_scmi: Protect device request lookup with RCU (git-fixes).\n- firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes).\n- firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes).\n- firmware: arm_scmi: Use channel ID for transport teardown (git-fixes).\n- firmware_loader: do not queue completed sysfs fallback requests (git-fixes).\n- fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes).\n- fpga: dfl: fme: add error handling (git-fixes).\n- fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes).\n- gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes).\n- gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes).\n- HID: core: fix number/pointer type confusion on long items (git-fixes).\n- HID: core: fix OOB read of field-\u003eusage in hid_set_field() (git-fixes).\n- HID: hyperv: validate initial device info bounds (git-fixes).\n- HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes).\n- HID: lg4ff: validate report length before fixed offsets (git-fixes).\n- HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes).\n- HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes).\n- HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes).\n- HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes).\n- HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes).\n- HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes).\n- HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes).\n- HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes).\n- HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes).\n- HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes).\n- HID: roccat: bound device-supplied profile index (git-fixes).\n- HID: roccat: free buffered reports when destroying device (git-fixes).\n- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes).\n- HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes).\n- HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes).\n- HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes).\n- hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes).\n- hwmon: (lm25066) Use i2c_get_match_data() (stable-fixes).\n- hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes).\n- hwmon: (max6621) fix temperature clamp range (git-fixes).\n- hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes).\n- hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes).\n- hwrng: omap - Fix probe error path cleanup (git-fixes).\n- hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes).\n- i2c: bcm-iproc: remove printout on handled timeouts (stable-fixes).\n- i2c: core: fix debugfs UAF on adapter removal (git-fixes).\n- i2c: iproc: reset bus after timeout if START_BUSY is stuck (git-fixes).\n- i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes).\n- i2c: mux: Fix channel node leak on adapter add failure (git-fixes).\n- i2c: ocores: Disable clock on failed resume (git-fixes).\n- i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes).\n- i3c: master: Fix device_register() error path (git-fixes).\n- i3c: master: Fix info leak and UAF in device unregister path (git-fixes).\n- i3c: master: Fix potential UAF in i3c_device_uevent() (git-fixes).\n- i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes).\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes).\n- iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes).\n- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes).\n- iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes).\n- iio: dac: m62332: Fix regulator reference count imbalance (git-fixes).\n- iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes).\n- iio: light: cm32181: return zero after writing calibscale (git-fixes).\n- iio: light: gp2ap002: Disable regulators on resume failure (git-fixes).\n- iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes).\n- iio: light: isl29028: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2583: return zero in write_raw() on success (git-fixes).\n- iio: light: tsl2772: fix ALS calibscale readback (git-fixes).\n- iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes).\n- iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes).\n- iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes).\n- iio: srf04: fix pm_runtime handling on probe error path (git-fixes).\n- iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes).\n- Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes).\n- Input: evdev - fix information leak in evdev_pass_values() (stable-fixes).\n- Input: evdev - sanitize event type index when fetching event masks (stable-fixes).\n- Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes).\n- Input: focaltech - use signed coordinates to prevent underflow (git-fixes).\n- Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes).\n- Input: iforce - validate input packet lengths (stable-fixes).\n- Input: iqs5xx - validate firmware record destination span (git-fixes).\n- Input: mms114 - fix Y-resolution configuration (git-fixes).\n- Input: psxpad-spi - set driver data before use (git-fixes).\n- Input: sur40 - fix input device registration ordering (stable-fixes).\n- Input: sur40 - fix V4L error path cleanup (stable-fixes).\n- Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes).\n- Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes).\n- Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes).\n- Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes).\n- Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes).\n- Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes).\n- interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes).\n- ipmi: ipmb: validate write message length (git-fixes).\n- ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes).\n- kthread: Default affine kthread to its preferred NUMA node (bsc#1269313).\n- kthread: Make sure kthread hasn't started while binding it (bsc#1269313).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: PPC: Book3S HV: Add support for compat CPU capabilities for KVM on PowerNV (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Implement compat CPU capability retrieval for KVM on PowerVM (bsc#1263864 ltc#217835).\n- KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode (bsc#1263864 ltc#217835).\n- KVM: PPC: Document KVM_PPC_GET_COMPAT_CAPS ioctl (bsc#1263864 ltc#217835).\n- KVM: PPC: Introduce KVM_CAP_PPC_COMPAT_CAPS and wire up ioctl (bsc#1263864 ltc#217835).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- leds: pca9532: Fix inverted GPIO output polarity (git-fixes).\n- leds: pca9532: Fix phantom device registration on missing hardware (git-fixes).\n- lib/string: fix memchr_inv() for large ranges (git-fixes).\n- lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes).\n- mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes).\n- mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes).\n- maple_tree: fix argument name in header (git-fixes).\n- md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261).\n- media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes).\n- media: amphion: Remove obsolete frame_count check in venc_start_session (git-fixes).\n- media: cec-pin: Fix event FIFO ordering (git-fixes).\n- media: cec: disable delayed work before freeing an interrupted transmit (git-fixes).\n- media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes).\n- media: cec: Serialize exclusive follower delivery (git-fixes).\n- media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes).\n- media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes).\n- media: cobalt: Avoid freeing ALSA private data twice (git-fixes).\n- media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes).\n- media: cx23885: cancel NetUP CI work before teardown (git-fixes).\n- media: em28xx: defer audio-only extension registration (git-fixes).\n- media: em28xx: fix use-after-free of dev_next-\u003edevlist on disconnect (git-fixes).\n- media: go7007: defer the ALSA v4l2 put until card release (git-fixes).\n- media: i2c: imx219: Rename VTS to FRM_LENGTH (stable-fixes).\n- media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes).\n- media: i2c: ov7740: fix use-after-destroy in remove (git-fixes).\n- media: i2c: rdacm21: Fix missing media_entity_cleanup() (git-fixes).\n- media: imx219: Fix maximum frame length in lines (git-fixes).\n- media: intel/ipu6: fix async notifier cleanup leak on parse error (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes).\n- media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes).\n- media: mc-entity: Add missing kerneldoc (git-fixes).\n- media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes).\n- media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes).\n- media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes).\n- media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes).\n- media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes).\n- media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes).\n- media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes).\n- media: s2255: bound JPEG frame size before copying into the buffer (git-fixes).\n- media: s2255: check firmware size before reading trailing marker (git-fixes).\n- media: saa7164: fix cleanup on resource allocation failure (git-fixes).\n- media: tda18250: fix possible integer overflow (git-fixes).\n- media: usbtv: keep device alive while ALSA card exists (git-fixes).\n- media: v4l2-async: avoid deleting unlinked ASC entry on link error (git-fixes).\n- media: v4l2-async: Unregister sub-device if asc_list is empty (git-fixes).\n- media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes).\n- media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes).\n- media: venus: fix payload size calculation in parse_raw_formats() (git-fixes).\n- media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes).\n- media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes).\n- media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes).\n- media: vimc: fix pixel format lookup in enum_framesizes (git-fixes).\n- media: zoran: Avoid freeing a registered video_device twice (git-fixes).\n- mei: pull kvfree out of spinlock (git-fixes).\n- mfd: iqs62x: Reject zero-length firmware records (git-fixes).\n- mfd: rave-sp: validate received frame payload lengths (git-fixes).\n- misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes).\n- misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes).\n- misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes).\n- misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes).\n- misc: fastrpc: take fl-\u003elock when moving mmaps on interrupted invoke (git-fixes).\n- misc: rtsx: add missing write register handling (git-fixes).\n- misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- mm: Create/affine kcompactd to its preferred node (bsc#1269313).\n- mm: Create/affine kswapd to its preferred node (bsc#1269313).\n- mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes).\n- mmc: sdhci: unmap the bounce buffer before device release (git-fixes).\n- mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes).\n- mtd: afs: validate v2 image info bounds (git-fixes).\n- mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes).\n- mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes).\n- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes).\n- mtd: rawnand: validate ONFI extended parameter page sections (git-fixes).\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes).\n- net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes).\n- net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes).\n- net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes).\n- net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes).\n- net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes).\n- nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes).\n- nfc: digital: Do not dump a NULL response in command completion (git-fixes).\n- nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes).\n- nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes).\n- nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes).\n- nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes).\n- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes).\n- nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt (git-fixes).\n- nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes).\n- nfc: microread: validate target discovery payload lengths (git-fixes).\n- nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes).\n- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes).\n- nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes).\n- nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes).\n- nfc: nci: free destination parameters when closing a connection (git-fixes).\n- nfc: pn533: hold a reference to the request skb during send_frame (git-fixes).\n- nfc: pn533: purge fragmented skbs during cleanup (git-fixes).\n- nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes).\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes).\n- PCI: meson: Fix GPIO state while requesting PERST# (git-fixes).\n- phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs (git-fixes).\n- phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend (git-fixes).\n- phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table (git-fixes).\n- phy: sunplus: fix error handling in sp_uphy_init() (git-fixes).\n- pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes).\n- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 (git-fixes).\n- pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes).\n- pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes).\n- platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes).\n- platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes).\n- platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes).\n- platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes).\n- platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes).\n- platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes).\n- platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes).\n- platform/surface: acpi-notify: Check ACPI companion before use (git-fixes).\n- platform/x86/amd/hsmp: Reject negative power cap writes in hwmon (git-fixes).\n- platform/x86: dell-privacy: Fix race condition (git-fixes).\n- platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes).\n- platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes).\n- platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes).\n- platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS (git-fixes).\n- platform/x86: hp-bioscfg: advance elem past consumed array elements (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() (git-fixes).\n- platform/x86: hp-bioscfg: fix heap OOB read on empty password write (git-fixes).\n- platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password (git-fixes).\n- platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() (git-fixes).\n- platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed (git-fixes).\n- platform/x86: hp-bioscfg: fix password encoding bounds check (git-fixes).\n- platform/x86: hp-bioscfg: warn on element type mismatch instead of failing (git-fixes).\n- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes).\n- platform/x86: ISST: Add a NULL check for sst_inst (git-fixes).\n- platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes).\n- platform/x86: ISST: Return error during profile addition (git-fixes).\n- platform/x86: ISST: Use PP level enable mask (git-fixes).\n- platform/x86: ISST: Validate level in perf mask ioctls (git-fixes).\n- platform/x86: ISST: Validate logical CPU id and clos id (git-fixes).\n- platform/x86: ISST: Validate parameter for core power state (git-fixes).\n- platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes).\n- PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes).\n- power: supply: bd99954: Drop bad register fields (git-fixes).\n- power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes).\n- power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes).\n- power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes).\n- power: supply: bq24257: fix use-after-free on remove (git-fixes).\n- power: supply: bq25890: Fix power_supply reference leak (git-fixes).\n- power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes).\n- power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes).\n- power: supply: isp1704_charger: cancel work on remove (git-fixes).\n- power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes).\n- power: supply: max17040: drop incorrect I2C functionality check (git-fixes).\n- power: supply: max17040: synchronize work cancellation on suspend (git-fixes).\n- power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes).\n- power: supply: rt9455: quiesce delayed work before teardown (git-fixes).\n- power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes).\n- power: supply: twl4030_charger: cancel workers via devm (git-fixes).\n- power: supply: ucs1002: fix use-after-free on remove (git-fixes).\n- powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes).\n- powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors (bsc#1263864 ltc#217835).\n- powerpc/pseries: Ensure vpa,slb_shadow \u0026 dtl are unregistered during crash (bsc#1271256).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (bsc#1263864 ltc#217835).\n- powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (bsc#1263864 ltc#217835).\n- ppdev: prevent overflow when setting port timeout (git-fixes).\n- qede: fix out-of-bounds check for cqe-\u003elen_list (git-fixes).\n- rapidio: clear mport-\u003enet when rio_add_net() fails (git-fixes).\n- rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes).\n- RDMA/irdma: Remove redundant legacy_mode checks (git-fixes).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes).\n- regulator: core: use system_freezable_wq for init complete work (git-fixes).\n- regulator: devres: add API for reference voltage supplies (stable-fixes).\n- regulator: devres: fix devm_regulator_get_enable_read_voltage() return (git-fixes).\n- regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes).\n- regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes).\n- remoteproc: qcom: Fix glink-\u003enode reference leak in qcom_add_glink_subdev (git-fixes).\n- remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes).\n- remoteproc: scp: Fix device reference leak on failed lookup (git-fixes).\n- Revert 'drm/amdgpu: fix aperture mapping leak' (git-fixes).\n- Revert 'media: v4l2-dev: fix error handling in __video_register_device()' (git-fixes).\n- Revert 'thermal/drivers/hwmon: Cleanup coding style a bit' (stable-fixes).\n- rpmsg: core: Fix incorrect return value documentation (git-fixes).\n- rpmsg: glink: smem: order FIFO read after availability check (git-fixes).\n- rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes).\n- rtc: pcf8563: fix clock provider leak on unbind (git-fixes).\n- rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes).\n- rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes).\n- rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes).\n- rtc: zynqmp: Return optional clock lookup errors (git-fixes).\n- sched,arm64: Handle CPU isolation on last resort fallback rq (bsc#1269313).\n- scsi: fnic: Abort timed-out NVMe LS requests (bsc#1236344).\n- scsi: fnic: Add FDLS role handling for NVMe initiators (bsc#1236344).\n- scsi: fnic: Add the NVMe/FC transport path (bsc#1236344).\n- scsi: fnic: Advertise NVMe initiator service parameters (bsc#1236344).\n- scsi: fnic: Bump up version number (bsc#1236344).\n- scsi: fnic: Decode firmware role configuration (bsc#1236344).\n- scsi: fnic: Do not use GFP_ZERO for mempools (bsc#1236344).\n- scsi: fnic: Expose NVMe transport state in debugfs (bsc#1236344).\n- scsi: fnic: Handle NVMe LS frames in FDLS (bsc#1236344).\n- scsi: fnic: Make debug logging protocol independent (bsc#1236344).\n- scsi: fnic: Make fnic_queuecommand() easier to analyze (bsc#1236344).\n- scsi: fnic: Refactor in_remove flag and call to fnic_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Remove a useless struct mempool forward declaration (bsc#1236344).\n- scsi: fnic: Rename fnic_scsi_fcpio_reset() (bsc#1236344).\n- scsi: fnic: Route completions and resets by initiator role (bsc#1236344).\n- scsi: fnic: Self-assignment of intr_time_type has no effect (bsc#1236344).\n- scsi: fnic: Send NVMe LS requests through FDLS (bsc#1236344).\n- scsi: fnic: Switch to use %ptSp (bsc#1236344).\n- scsi: fnic: Track NVMe transport statistics (bsc#1236344).\n- scsi: fnic: Use fnic_num for non-SCSI identifiers (bsc#1236344).\n- scsi: fnic: Use mempool for receive frames (bsc#1236344).\n- scsi: qla2xxx: Declare qla2xxx_mqueuecommand() static (bsc#1275737).\n- scsi: qla2xxx: Use nr_cpu_ids instead of NR_CPUS for qp_cpu_map allocation (bsc#1275737).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes).\n- serial: 8250_dma: Clear stale RX state on shutdown (git-fixes).\n- serial: amba-pl011: unprepare console clock on unregister (git-fixes).\n- serial: core: clear freed pointers on uart_register_driver() failure (git-fixes).\n- serial: qcom-geni: fix TX DMA buffer flush (git-fixes).\n- serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants (stable-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n- smb: client: resolve SWN tcon from live registrations (bsc#1273872).\n- soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes).\n- soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes).\n- soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes).\n- software node: Fix software_node_get_reference_args() with index -1 (git-fixes).\n- soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes).\n- speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes).\n- spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes).\n- spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes).\n- spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes).\n- staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes).\n- staging: media: tegra-video: fix of_node_put() on VIP parse errors (git-fixes).\n- staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes).\n- staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes).\n- staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes).\n- staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes).\n- staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes).\n- staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes).\n- staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes).\n- staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes).\n- thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes).\n- thermal/drivers/qoriq: Disable clock on resume failure (git-fixes).\n- thermal: intel: int3400: clean up ODVP on probe failures (git-fixes).\n- thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (git-fixes).\n- thunderbolt: Fix bandwidth group reservation indexing (git-fixes).\n- thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes).\n- tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes).\n- tpm: st33zp24: Return zero on status read failure (git-fixes).\n- tpm: st33zp24: Validate locality read result (git-fixes).\n- tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes).\n- tty: clear cdev pointer after cdev_add() failure (git-fixes).\n- tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes).\n- tty: skip cdev_del() when no cdev is registered (git-fixes).\n- uaccess: add copy_struct_to_user helper (bsc#1263864 ltc#217835).\n- uaccess: fix ignored_trailing logic in copy_struct_to_user() (bsc#1263864 ltc#217835).\n- uio: Fix stale info pointer in failed registration path (git-fixes).\n- usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes).\n- usb: atm: usbatm: fix invalid ci_range initialization (git-fixes).\n- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes).\n- usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes).\n- usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes).\n- usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes).\n- usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes).\n- usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes).\n- usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes).\n- usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes).\n- usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes).\n- usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes).\n- usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes).\n- usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes).\n- usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes).\n- usb: gadget: uac: validate rate list length before storing (git-fixes).\n- usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes).\n- usb: mtu3: allow system suspend during active gadget connection (git-fixes).\n- usb: musb: omap2430: clean up probe error handling (stable-fixes).\n- USB: phy: fsl-usb: fix missing static keywords (git-fixes).\n- usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes).\n- USB: serial: digi_acceleport: fix port registration order (git-fixes).\n- USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes).\n- USB: serial: option: add TDTECH MT5710-CN (stable-fixes).\n- USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes).\n- USB: serial: spcp8x5: drop broken carrier detect support (git-fixes).\n- USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes).\n- usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive() (git-fixes).\n- usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes).\n- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes).\n- usb: xhci: Handle USB3 port events when there is one roothub (git-fixes).\n- vt: add permission check for KDSKBMETA ioctl (stable-fixes).\n- vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes).\n- w1: ds28e17: reject an oversize length on an I2C block read (git-fixes).\n- w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes).\n- wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes).\n- wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes).\n- wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes).\n- wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes).\n- wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes).\n- wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes).\n- wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes).\n- wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes).\n- wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes).\n- wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes).\n- wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mei: pass correct argument to function (git-fixes).\n- wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes).\n- wifi: mac80211: disconnect on CSA to channel 0 (git-fixes).\n- wifi: mac80211: fix multi-link element inheritance (git-fixes).\n- wifi: mac80211: fix per-STA profile length in cross-link CSA parsing (git-fixes).\n- wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes).\n- wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes).\n- wifi: mac80211: skip unused probe response countdown offsets (git-fixes).\n- wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes).\n- wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes).\n- wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes).\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes).\n- wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes).\n- wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes).\n- wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes).\n- wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes).\n- wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes).\n- wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes).\n- wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes).\n- wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes).\n- wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes).\n- wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes).\n- wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes).\n- wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes).\n- wifi: mt76: mt7921: validate CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes).\n- wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes).\n- wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes).\n- wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes).\n- wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU (git-fixes).\n- wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes).\n- wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes).\n- wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes).\n- wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes).\n- wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes).\n- wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes).\n- wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes).\n- wifi: rtw89: fix HE extended capability length check (git-fixes).\n- wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n- x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (bsc#1240957 bsc#1249104 bsc#1265220).\n- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes).\n- xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes).\n","status":"published","published":"2026-10-07T22:31:36Z","modified":"2026-10-08T19:27:38.397282936Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4687-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138).\n- CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081).\n- CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953).\n- CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642).\n- CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499).\n- CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517).\n- CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522).\n- CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472).\n- CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769).\n- CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480).\n- CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420).\n- CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011).\n- CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64496: iio: event: Fix event FIFO reset race (bsc#1273600).\n- CVE-2026-64540: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (bsc#1273302).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-68108: drm/amdgpu/vce: fix integer overflow in image size (bsc#1274869).\n- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).\n- CVE-2026-68184: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (bsc#1274981).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68350: wifi: carl9170: fix OOB read from off-by-two in TX status handler (bsc#1274682).\n- CVE-2026-68365: USB: serial: io_edgeport: cap received transmit credits (bsc#1276257).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-68479: Bluetooth: btrtl: validate firmware patch bounds (bsc#1276585).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72166: net/9p: avoid -ERESTARTSYS leak to userspace (bsc#1277556).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: fix false-positive __read_overflow2_field() warning (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74276: spi: xilinx: use FIFO occupancy register to determine buffer size (bsc#1276495).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74386: nvmet-tcp: fix a memory leak when releasing a queue (bsc#1277098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74424: fbcon: fix NULL pointer dereference for a console without vc_data (bsc#1276321).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74497: ALSA: usb-audio: Clamp frame size in implicit-feedback mode (bsc#1275957).\n- CVE-2026-74498: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (bsc#1275958).\n- CVE-2026-74499: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (bsc#1275959).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74585: thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (bsc#1277881).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74682: ALSA: usb-audio: fix OOB write on Type II inbound URBs (bsc#1276934).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74691: net: thunderbolt: Tear down DMA paths before stopping the rings (bsc#1276925).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80558: libceph: Avoid using invalid osd indices from primary_temp (bsc#1277485).\n- CVE-2026-80561: libceph: fix multiple unsafe decodes in decode_locker() (bsc#1277265).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80798: nfc: llcp: reject PDUs shorter than the LLCP header (bsc#1279809).\n- CVE-2026-80800: nfc: llcp: bound the connect_sn TLV walk to the skb (bsc#1279812).\n- CVE-2026-80829: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (bsc#1279485).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80908: drm/amdgpu: Reject UVD message with dimensions above 4096 (bsc#1279627).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-81005: ipmi: si: Fix NULL pointer dereference after failed registration (bsc#1280230).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: Do not reset transport on data digest errors (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89524: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (bsc#1280581).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89752: mm: memcg: stop reclaim when a limit update is superseded (bsc#1281176).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89870: media: zoran: Avoid freeing a registered video_device twice (bsc#1281352).\n- CVE-2026-89927: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (bsc#1281429).\n- CVE-2026-89929: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90223: nfc: llcp: bound SNL TLV parsing to the skb and add length checks (bsc#1281708).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (git-fixes).\n- default_gfp(): avoid using the 'newfangled' __VA_OPT__ trick (bsc#1280139).\n- Fix backport of 'RDMA/efa: Fix PBL chunk length computation' Refresh:.\n- gpio: mvebu: Use IS_REACHABLE instead of IS_ENABLED for CONFIG_PWM (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- RDMA/efa: Fix PBL chunk length computation.\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- scripts/osc_wrapper: Select repository appropriate for architecture.\n- scripts: Add kernel_repos.\n- scripts: obsapi: Kick get_kernel_projects from uploader \n- scripts: obsapi: Kick get_project_repo_archs from uploader \n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb3: missing inode locks in punch hole (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- xfs: don't drain buffer lru on freeze and read-only remount (bsc#1280223).\n","status":"published","published":"2026-10-15T12:38:33Z","modified":"2026-10-16T10:30:20.089916452Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8726-1","title":"linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53152, CVE-2026-53153, CVE-2026-53154, CVE-2026-53155,\nCVE-2026-53156, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53160, CVE-2026-53161, CVE-2026-53162, CVE-2026-53163,\nCVE-2026-53164, CVE-2026-53165, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53169, CVE-2026-53170, CVE-2026-53171, CVE-2026-53172,\nCVE-2026-53173, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53187, CVE-2026-53188,\nCVE-2026-53189, CVE-2026-53190, CVE-2026-53191, CVE-2026-53192,\nCVE-2026-53193, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,\nCVE-2026-53197, CVE-2026-53198, CVE-2026-53199, CVE-2026-53200,\nCVE-2026-53201, CVE-2026-53202, CVE-2026-53203, CVE-2026-53204,\nCVE-2026-53205, CVE-2026-53206, CVE-2026-53207, CVE-2026-53208,\nCVE-2026-53209, CVE-2026-53210, CVE-2026-53211, CVE-2026-53213,\nCVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53222, CVE-2026-53223, CVE-2026-53226,\nCVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53243,\nCVE-2026-53244, CVE-2026-53245, CVE-2026-53248, CVE-2026-53249,\nCVE-2026-53250, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53257,\nCVE-2026-53258, CVE-2026-53259, CVE-2026-53261, CVE-2026-53262,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270,\nCVE-2026-53271, CVE-2026-53272, CVE-2026-53273, CVE-2026-53274,\nCVE-2026-53275, CVE-2026-53276, CVE-2026-53325, CVE-2026-53326,\nCVE-2026-53327, CVE-2026-53328, CVE-2026-53329, CVE-2026-53330,\nCVE-2026-53331, CVE-2026-53332, CVE-2026-53333, CVE-2026-53334,\nCVE-2026-53335, CVE-2026-53336, CVE-2026-53337, CVE-2026-53338,\nCVE-2026-53339, CVE-2026-53340, CVE-2026-53341, CVE-2026-53342,\nCVE-2026-53343, CVE-2026-53344, CVE-2026-53345, CVE-2026-53346,\nCVE-2026-53347, CVE-2026-53348, CVE-2026-53349, CVE-2026-53350,\nCVE-2026-53351, CVE-2026-53352, CVE-2026-53353, CVE-2026-53354,\nCVE-2026-53355, CVE-2026-53356, CVE-2026-53361, CVE-2026-53362,\nCVE-2026-53363, CVE-2026-53366, CVE-2026-53381, CVE-2026-53382,\nCVE-2026-53383, CVE-2026-53384, CVE-2026-53385, CVE-2026-53386,\nCVE-2026-53387, CVE-2026-53388, CVE-2026-53389, CVE-2026-53390,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53394,\nCVE-2026-53395, CVE-2026-53396, CVE-2026-53397, CVE-2026-53398,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53401, CVE-2026-53402,\nCVE-2026-53403, CVE-2026-63794, CVE-2026-63795, CVE-2026-63796,\nCVE-2026-63797, CVE-2026-63798, CVE-2026-63799, CVE-2026-63800,\nCVE-2026-63801, CVE-2026-63802, CVE-2026-63803, CVE-2026-63804,\nCVE-2026-63805, CVE-2026-63806, CVE-2026-63807, CVE-2026-63808,\nCVE-2026-63809, CVE-2026-63810, CVE-2026-63811, CVE-2026-63812,\nCVE-2026-63813, CVE-2026-63814, CVE-2026-63815, CVE-2026-63816,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63819, CVE-2026-63820,\nCVE-2026-63821, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63825, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63832,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,\nCVE-2026-63871, CVE-2026-63873, CVE-2026-63874, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64192,\nCVE-2026-64205, CVE-2026-64206, CVE-2026-64207, CVE-2026-64244,\nCVE-2026-64245, CVE-2026-64246, CVE-2026-64247, CVE-2026-64249,\nCVE-2026-64251, CVE-2026-64253, CVE-2026-64254, CVE-2026-64255,\nCVE-2026-64256, CVE-2026-64258, CVE-2026-64259, CVE-2026-64260,\nCVE-2026-64261, CVE-2026-64262, CVE-2026-64263, CVE-2026-64264,\nCVE-2026-64265, CVE-2026-64266, CVE-2026-64267, CVE-2026-64268,\nCVE-2026-64269, CVE-2026-64270, CVE-2026-64271, CVE-2026-64272,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64278, CVE-2026-64279, CVE-2026-64280,\nCVE-2026-64282, CVE-2026-64283, CVE-2026-64284, CVE-2026-64285,\nCVE-2026-64286, CVE-2026-64287, CVE-2026-64288, CVE-2026-64289,\nCVE-2026-64290, CVE-2026-64291, CVE-2026-64292, CVE-2026-64293,\nCVE-2026-64294, CVE-2026-64295, CVE-2026-64296, CVE-2026-64297,\nCVE-2026-64298, CVE-2026-64299, CVE-2026-64300, CVE-2026-64301,\nCVE-2026-64302, CVE-2026-64303, CVE-2026-64304, CVE-2026-64305,\nCVE-2026-64306, CVE-2026-64307, CVE-2026-64308, CVE-2026-64309,\nCVE-2026-64310, CVE-2026-64312, CVE-2026-64313, CVE-2026-64314,\nCVE-2026-64315, CVE-2026-64316, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64319, CVE-2026-64320, CVE-2026-64321, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64325, CVE-2026-64326,\nCVE-2026-64327, CVE-2026-64328, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64339, CVE-2026-64340, CVE-2026-64341, CVE-2026-64342,\nCVE-2026-64343, CVE-2026-64344, CVE-2026-64345, CVE-2026-64346,\nCVE-2026-64347, CVE-2026-64348, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64353, CVE-2026-64354, CVE-2026-64355,\nCVE-2026-64356, CVE-2026-64357, CVE-2026-64358, CVE-2026-64359,\nCVE-2026-64360, CVE-2026-64361, CVE-2026-64362, CVE-2026-64363,\nCVE-2026-64364, CVE-2026-64365, CVE-2026-64366, CVE-2026-64367,\nCVE-2026-64368, CVE-2026-64369, CVE-2026-64370, CVE-2026-64371,\nCVE-2026-64372, CVE-2026-64373, CVE-2026-64374, CVE-2026-64375,\nCVE-2026-64376, CVE-2026-64377, CVE-2026-64378, CVE-2026-64379,\nCVE-2026-64380, CVE-2026-64381, CVE-2026-64382, CVE-2026-64383,\nCVE-2026-64384, CVE-2026-64385, CVE-2026-64386, CVE-2026-64387,\nCVE-2026-64388, CVE-2026-64389, CVE-2026-64390, CVE-2026-64391,\nCVE-2026-64392, CVE-2026-64393, CVE-2026-64394, CVE-2026-64395,\nCVE-2026-64396, CVE-2026-64397, CVE-2026-64398, CVE-2026-64399,\nCVE-2026-64400, CVE-2026-64401, CVE-2026-64402, CVE-2026-64403,\nCVE-2026-64404, CVE-2026-64405, CVE-2026-64406, CVE-2026-64407,\nCVE-2026-64408, CVE-2026-64409, CVE-2026-64410, CVE-2026-64411,\nCVE-2026-64412, CVE-2026-64413, CVE-2026-64414, CVE-2026-64415,\nCVE-2026-64416, CVE-2026-64417, CVE-2026-64418, CVE-2026-64419,\nCVE-2026-64420, CVE-2026-64421, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64424, CVE-2026-64425, CVE-2026-64426, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64433,\nCVE-2026-64434, CVE-2026-64435, CVE-2026-64436, CVE-2026-64438,\nCVE-2026-64439, CVE-2026-64440, CVE-2026-64441, CVE-2026-64442,\nCVE-2026-64443, CVE-2026-64444, CVE-2026-64445, CVE-2026-64446,\nCVE-2026-64447, CVE-2026-64448, CVE-2026-64449, CVE-2026-64450,\nCVE-2026-64451, CVE-2026-64452, CVE-2026-64453, CVE-2026-64454,\nCVE-2026-64455, CVE-2026-64456, CVE-2026-64457, CVE-2026-64458,\nCVE-2026-64459, CVE-2026-64460, CVE-2026-64461, CVE-2026-64462,\nCVE-2026-64463, CVE-2026-64464, CVE-2026-64465, CVE-2026-64466,\nCVE-2026-64467, CVE-2026-64468, CVE-2026-64469, CVE-2026-64470,\nCVE-2026-64471, CVE-2026-64472, CVE-2026-64473, CVE-2026-64474,\nCVE-2026-64475, CVE-2026-64476, CVE-2026-64477, CVE-2026-64478,\nCVE-2026-64479, CVE-2026-64480, CVE-2026-64481, CVE-2026-64482,\nCVE-2026-64483, CVE-2026-64484, CVE-2026-64485, CVE-2026-64486,\nCVE-2026-64487, CVE-2026-64488, CVE-2026-64489, CVE-2026-64490,\nCVE-2026-64491, CVE-2026-64492, CVE-2026-64493, CVE-2026-64494,\nCVE-2026-64495, CVE-2026-64496, CVE-2026-64497, CVE-2026-64499,\nCVE-2026-64500, CVE-2026-64501, CVE-2026-64502, CVE-2026-64503,\nCVE-2026-64504, CVE-2026-64505, CVE-2026-64507, CVE-2026-64508,\nCVE-2026-64509, CVE-2026-64510, CVE-2026-64511, CVE-2026-64512,\nCVE-2026-64513, CVE-2026-64514, CVE-2026-64529, CVE-2026-64536,\nCVE-2026-64556, CVE-2026-64588, CVE-2026-64589, CVE-2026-64590,\nCVE-2026-64591, CVE-2026-64592, CVE-2026-64593, CVE-2026-64594,\nCVE-2026-64596, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64601, CVE-2026-64602, CVE-2026-64603,\nCVE-2026-64604, CVE-2026-68084, CVE-2026-68085, CVE-2026-68087,\nCVE-2026-68088, CVE-2026-68089, CVE-2026-68090, CVE-2026-68091,\nCVE-2026-68092, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-07T08:57:53Z","modified":"2026-11-09T12:52:46.279122012Z","updated_at":"2026-11-09T13:25:58.954257Z"},{"id":"USN-8726-2","title":"linux-raspi vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53152, CVE-2026-53153, CVE-2026-53154, CVE-2026-53155,\nCVE-2026-53156, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53160, CVE-2026-53161, CVE-2026-53162, CVE-2026-53163,\nCVE-2026-53164, CVE-2026-53165, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53169, CVE-2026-53170, CVE-2026-53171, CVE-2026-53172,\nCVE-2026-53173, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53187, CVE-2026-53188,\nCVE-2026-53189, CVE-2026-53190, CVE-2026-53191, CVE-2026-53192,\nCVE-2026-53193, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,\nCVE-2026-53197, CVE-2026-53198, CVE-2026-53199, CVE-2026-53200,\nCVE-2026-53201, CVE-2026-53202, CVE-2026-53203, CVE-2026-53204,\nCVE-2026-53205, CVE-2026-53206, CVE-2026-53207, CVE-2026-53208,\nCVE-2026-53209, CVE-2026-53210, CVE-2026-53211, CVE-2026-53213,\nCVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53222, CVE-2026-53223, CVE-2026-53226,\nCVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53243,\nCVE-2026-53244, CVE-2026-53245, CVE-2026-53248, CVE-2026-53249,\nCVE-2026-53250, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53257,\nCVE-2026-53258, CVE-2026-53259, CVE-2026-53261, CVE-2026-53262,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270,\nCVE-2026-53271, CVE-2026-53272, CVE-2026-53273, CVE-2026-53274,\nCVE-2026-53275, CVE-2026-53276, CVE-2026-53325, CVE-2026-53326,\nCVE-2026-53327, CVE-2026-53328, CVE-2026-53329, CVE-2026-53330,\nCVE-2026-53331, CVE-2026-53332, CVE-2026-53333, CVE-2026-53334,\nCVE-2026-53335, CVE-2026-53336, CVE-2026-53337, CVE-2026-53338,\nCVE-2026-53339, CVE-2026-53340, CVE-2026-53341, CVE-2026-53342,\nCVE-2026-53343, CVE-2026-53344, CVE-2026-53345, CVE-2026-53346,\nCVE-2026-53347, CVE-2026-53348, CVE-2026-53349, CVE-2026-53350,\nCVE-2026-53351, CVE-2026-53352, CVE-2026-53353, CVE-2026-53354,\nCVE-2026-53355, CVE-2026-53356, CVE-2026-53361, CVE-2026-53362,\nCVE-2026-53363, CVE-2026-53366, CVE-2026-53381, CVE-2026-53382,\nCVE-2026-53383, CVE-2026-53384, CVE-2026-53385, CVE-2026-53386,\nCVE-2026-53387, CVE-2026-53388, CVE-2026-53389, CVE-2026-53390,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53394,\nCVE-2026-53395, CVE-2026-53396, CVE-2026-53397, CVE-2026-53398,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53401, CVE-2026-53402,\nCVE-2026-53403, CVE-2026-63794, CVE-2026-63795, CVE-2026-63796,\nCVE-2026-63797, CVE-2026-63798, CVE-2026-63799, CVE-2026-63800,\nCVE-2026-63801, CVE-2026-63802, CVE-2026-63803, CVE-2026-63804,\nCVE-2026-63805, CVE-2026-63806, CVE-2026-63807, CVE-2026-63808,\nCVE-2026-63809, CVE-2026-63810, CVE-2026-63811, CVE-2026-63812,\nCVE-2026-63813, CVE-2026-63814, CVE-2026-63815, CVE-2026-63816,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63819, CVE-2026-63820,\nCVE-2026-63821, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63825, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63832,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,\nCVE-2026-63871, CVE-2026-63873, CVE-2026-63874, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64192,\nCVE-2026-64205, CVE-2026-64206, CVE-2026-64207, CVE-2026-64244,\nCVE-2026-64245, CVE-2026-64246, CVE-2026-64247, CVE-2026-64249,\nCVE-2026-64251, CVE-2026-64253, CVE-2026-64254, CVE-2026-64255,\nCVE-2026-64256, CVE-2026-64258, CVE-2026-64259, CVE-2026-64260,\nCVE-2026-64261, CVE-2026-64262, CVE-2026-64263, CVE-2026-64264,\nCVE-2026-64265, CVE-2026-64266, CVE-2026-64267, CVE-2026-64268,\nCVE-2026-64269, CVE-2026-64270, CVE-2026-64271, CVE-2026-64272,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64278, CVE-2026-64279, CVE-2026-64280,\nCVE-2026-64282, CVE-2026-64283, CVE-2026-64284, CVE-2026-64285,\nCVE-2026-64286, CVE-2026-64287, CVE-2026-64288, CVE-2026-64289,\nCVE-2026-64290, CVE-2026-64291, CVE-2026-64292, CVE-2026-64293,\nCVE-2026-64294, CVE-2026-64295, CVE-2026-64296, CVE-2026-64297,\nCVE-2026-64298, CVE-2026-64299, CVE-2026-64300, CVE-2026-64301,\nCVE-2026-64302, CVE-2026-64303, CVE-2026-64304, CVE-2026-64305,\nCVE-2026-64306, CVE-2026-64307, CVE-2026-64308, CVE-2026-64309,\nCVE-2026-64310, CVE-2026-64312, CVE-2026-64313, CVE-2026-64314,\nCVE-2026-64315, CVE-2026-64316, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64319, CVE-2026-64320, CVE-2026-64321, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64325, CVE-2026-64326,\nCVE-2026-64327, CVE-2026-64328, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64339, CVE-2026-64340, CVE-2026-64341, CVE-2026-64342,\nCVE-2026-64343, CVE-2026-64344, CVE-2026-64345, CVE-2026-64346,\nCVE-2026-64347, CVE-2026-64348, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64353, CVE-2026-64354, CVE-2026-64355,\nCVE-2026-64356, CVE-2026-64357, CVE-2026-64358, CVE-2026-64359,\nCVE-2026-64360, CVE-2026-64361, CVE-2026-64362, CVE-2026-64363,\nCVE-2026-64364, CVE-2026-64365, CVE-2026-64366, CVE-2026-64367,\nCVE-2026-64368, CVE-2026-64369, CVE-2026-64370, CVE-2026-64371,\nCVE-2026-64372, CVE-2026-64373, CVE-2026-64374, CVE-2026-64375,\nCVE-2026-64376, CVE-2026-64377, CVE-2026-64378, CVE-2026-64379,\nCVE-2026-64380, CVE-2026-64381, CVE-2026-64382, CVE-2026-64383,\nCVE-2026-64384, CVE-2026-64385, CVE-2026-64386, CVE-2026-64387,\nCVE-2026-64388, CVE-2026-64389, CVE-2026-64390, CVE-2026-64391,\nCVE-2026-64392, CVE-2026-64393, CVE-2026-64394, CVE-2026-64395,\nCVE-2026-64396, CVE-2026-64397, CVE-2026-64398, CVE-2026-64399,\nCVE-2026-64400, CVE-2026-64401, CVE-2026-64402, CVE-2026-64403,\nCVE-2026-64404, CVE-2026-64405, CVE-2026-64406, CVE-2026-64407,\nCVE-2026-64408, CVE-2026-64409, CVE-2026-64410, CVE-2026-64411,\nCVE-2026-64412, CVE-2026-64413, CVE-2026-64414, CVE-2026-64415,\nCVE-2026-64416, CVE-2026-64417, CVE-2026-64418, CVE-2026-64419,\nCVE-2026-64420, CVE-2026-64421, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64424, CVE-2026-64425, CVE-2026-64426, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64433,\nCVE-2026-64434, CVE-2026-64435, CVE-2026-64436, CVE-2026-64438,\nCVE-2026-64439, CVE-2026-64440, CVE-2026-64441, CVE-2026-64442,\nCVE-2026-64443, CVE-2026-64444, CVE-2026-64445, CVE-2026-64446,\nCVE-2026-64447, CVE-2026-64448, CVE-2026-64449, CVE-2026-64450,\nCVE-2026-64451, CVE-2026-64452, CVE-2026-64453, CVE-2026-64454,\nCVE-2026-64455, CVE-2026-64456, CVE-2026-64457, CVE-2026-64458,\nCVE-2026-64459, CVE-2026-64460, CVE-2026-64461, CVE-2026-64462,\nCVE-2026-64463, CVE-2026-64464, CVE-2026-64465, CVE-2026-64466,\nCVE-2026-64467, CVE-2026-64468, CVE-2026-64469, CVE-2026-64470,\nCVE-2026-64471, CVE-2026-64472, CVE-2026-64473, CVE-2026-64474,\nCVE-2026-64475, CVE-2026-64476, CVE-2026-64477, CVE-2026-64478,\nCVE-2026-64479, CVE-2026-64480, CVE-2026-64481, CVE-2026-64482,\nCVE-2026-64483, CVE-2026-64484, CVE-2026-64485, CVE-2026-64486,\nCVE-2026-64487, CVE-2026-64488, CVE-2026-64489, CVE-2026-64490,\nCVE-2026-64491, CVE-2026-64492, CVE-2026-64493, CVE-2026-64494,\nCVE-2026-64495, CVE-2026-64496, CVE-2026-64497, CVE-2026-64499,\nCVE-2026-64500, CVE-2026-64501, CVE-2026-64502, CVE-2026-64503,\nCVE-2026-64504, CVE-2026-64505, CVE-2026-64507, CVE-2026-64508,\nCVE-2026-64509, CVE-2026-64510, CVE-2026-64511, CVE-2026-64512,\nCVE-2026-64513, CVE-2026-64514, CVE-2026-64529, CVE-2026-64536,\nCVE-2026-64556, CVE-2026-64588, CVE-2026-64589, CVE-2026-64590,\nCVE-2026-64591, CVE-2026-64592, CVE-2026-64593, CVE-2026-64594,\nCVE-2026-64596, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64601, CVE-2026-64602, CVE-2026-64603,\nCVE-2026-64604, CVE-2026-68084, CVE-2026-68085, CVE-2026-68087,\nCVE-2026-68088, CVE-2026-68089, CVE-2026-68090, CVE-2026-68091,\nCVE-2026-68092, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-18T08:43:58Z","modified":"2026-11-09T12:47:28.847748334Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8726-3","title":"linux-ibm vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53152, CVE-2026-53153, CVE-2026-53154, CVE-2026-53155,\nCVE-2026-53156, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53160, CVE-2026-53161, CVE-2026-53162, CVE-2026-53163,\nCVE-2026-53164, CVE-2026-53165, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53169, CVE-2026-53170, CVE-2026-53171, CVE-2026-53172,\nCVE-2026-53173, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53187, CVE-2026-53188,\nCVE-2026-53189, CVE-2026-53190, CVE-2026-53191, CVE-2026-53192,\nCVE-2026-53193, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,\nCVE-2026-53197, CVE-2026-53198, CVE-2026-53199, CVE-2026-53200,\nCVE-2026-53201, CVE-2026-53202, CVE-2026-53203, CVE-2026-53204,\nCVE-2026-53205, CVE-2026-53206, CVE-2026-53207, CVE-2026-53208,\nCVE-2026-53209, CVE-2026-53210, CVE-2026-53211, CVE-2026-53213,\nCVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53222, CVE-2026-53223, CVE-2026-53226,\nCVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53243,\nCVE-2026-53244, CVE-2026-53245, CVE-2026-53248, CVE-2026-53249,\nCVE-2026-53250, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53257,\nCVE-2026-53258, CVE-2026-53259, CVE-2026-53261, CVE-2026-53262,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270,\nCVE-2026-53271, CVE-2026-53272, CVE-2026-53273, CVE-2026-53274,\nCVE-2026-53275, CVE-2026-53276, CVE-2026-53325, CVE-2026-53326,\nCVE-2026-53327, CVE-2026-53328, CVE-2026-53329, CVE-2026-53330,\nCVE-2026-53331, CVE-2026-53332, CVE-2026-53333, CVE-2026-53334,\nCVE-2026-53335, CVE-2026-53336, CVE-2026-53337, CVE-2026-53338,\nCVE-2026-53339, CVE-2026-53340, CVE-2026-53341, CVE-2026-53342,\nCVE-2026-53343, CVE-2026-53344, CVE-2026-53345, CVE-2026-53346,\nCVE-2026-53347, CVE-2026-53348, CVE-2026-53349, CVE-2026-53350,\nCVE-2026-53351, CVE-2026-53352, CVE-2026-53353, CVE-2026-53354,\nCVE-2026-53355, CVE-2026-53356, CVE-2026-53361, CVE-2026-53362,\nCVE-2026-53363, CVE-2026-53366, CVE-2026-53381, CVE-2026-53382,\nCVE-2026-53383, CVE-2026-53384, CVE-2026-53385, CVE-2026-53386,\nCVE-2026-53387, CVE-2026-53388, CVE-2026-53389, CVE-2026-53390,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53394,\nCVE-2026-53395, CVE-2026-53396, CVE-2026-53397, CVE-2026-53398,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53401, CVE-2026-53402,\nCVE-2026-53403, CVE-2026-63794, CVE-2026-63795, CVE-2026-63796,\nCVE-2026-63797, CVE-2026-63798, CVE-2026-63799, CVE-2026-63800,\nCVE-2026-63801, CVE-2026-63802, CVE-2026-63803, CVE-2026-63804,\nCVE-2026-63805, CVE-2026-63806, CVE-2026-63807, CVE-2026-63808,\nCVE-2026-63809, CVE-2026-63810, CVE-2026-63811, CVE-2026-63812,\nCVE-2026-63813, CVE-2026-63814, CVE-2026-63815, CVE-2026-63816,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63819, CVE-2026-63820,\nCVE-2026-63821, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63825, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63832,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,\nCVE-2026-63871, CVE-2026-63873, CVE-2026-63874, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64192,\nCVE-2026-64205, CVE-2026-64206, CVE-2026-64207, CVE-2026-64244,\nCVE-2026-64245, CVE-2026-64246, CVE-2026-64247, CVE-2026-64249,\nCVE-2026-64251, CVE-2026-64253, CVE-2026-64254, CVE-2026-64255,\nCVE-2026-64256, CVE-2026-64258, CVE-2026-64259, CVE-2026-64260,\nCVE-2026-64261, CVE-2026-64262, CVE-2026-64263, CVE-2026-64264,\nCVE-2026-64265, CVE-2026-64266, CVE-2026-64267, CVE-2026-64268,\nCVE-2026-64269, CVE-2026-64270, CVE-2026-64271, CVE-2026-64272,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64278, CVE-2026-64279, CVE-2026-64280,\nCVE-2026-64282, CVE-2026-64283, CVE-2026-64284, CVE-2026-64285,\nCVE-2026-64286, CVE-2026-64287, CVE-2026-64288, CVE-2026-64289,\nCVE-2026-64290, CVE-2026-64291, CVE-2026-64292, CVE-2026-64293,\nCVE-2026-64294, CVE-2026-64295, CVE-2026-64296, CVE-2026-64297,\nCVE-2026-64298, CVE-2026-64299, CVE-2026-64300, CVE-2026-64301,\nCVE-2026-64302, CVE-2026-64303, CVE-2026-64304, CVE-2026-64305,\nCVE-2026-64306, CVE-2026-64307, CVE-2026-64308, CVE-2026-64309,\nCVE-2026-64310, CVE-2026-64312, CVE-2026-64313, CVE-2026-64314,\nCVE-2026-64315, CVE-2026-64316, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64319, CVE-2026-64320, CVE-2026-64321, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64325, CVE-2026-64326,\nCVE-2026-64327, CVE-2026-64328, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64339, CVE-2026-64340, CVE-2026-64341, CVE-2026-64342,\nCVE-2026-64343, CVE-2026-64344, CVE-2026-64345, CVE-2026-64346,\nCVE-2026-64347, CVE-2026-64348, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64353, CVE-2026-64354, CVE-2026-64355,\nCVE-2026-64356, CVE-2026-64357, CVE-2026-64358, CVE-2026-64359,\nCVE-2026-64360, CVE-2026-64361, CVE-2026-64362, CVE-2026-64363,\nCVE-2026-64364, CVE-2026-64365, CVE-2026-64366, CVE-2026-64367,\nCVE-2026-64368, CVE-2026-64369, CVE-2026-64370, CVE-2026-64371,\nCVE-2026-64372, CVE-2026-64373, CVE-2026-64374, CVE-2026-64375,\nCVE-2026-64376, CVE-2026-64377, CVE-2026-64378, CVE-2026-64379,\nCVE-2026-64380, CVE-2026-64381, CVE-2026-64382, CVE-2026-64383,\nCVE-2026-64384, CVE-2026-64385, CVE-2026-64386, CVE-2026-64387,\nCVE-2026-64388, CVE-2026-64389, CVE-2026-64390, CVE-2026-64391,\nCVE-2026-64392, CVE-2026-64393, CVE-2026-64394, CVE-2026-64395,\nCVE-2026-64396, CVE-2026-64397, CVE-2026-64398, CVE-2026-64399,\nCVE-2026-64400, CVE-2026-64401, CVE-2026-64402, CVE-2026-64403,\nCVE-2026-64404, CVE-2026-64405, CVE-2026-64406, CVE-2026-64407,\nCVE-2026-64408, CVE-2026-64409, CVE-2026-64410, CVE-2026-64411,\nCVE-2026-64412, CVE-2026-64413, CVE-2026-64414, CVE-2026-64415,\nCVE-2026-64416, CVE-2026-64417, CVE-2026-64418, CVE-2026-64419,\nCVE-2026-64420, CVE-2026-64421, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64424, CVE-2026-64425, CVE-2026-64426, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64433,\nCVE-2026-64434, CVE-2026-64435, CVE-2026-64436, CVE-2026-64438,\nCVE-2026-64439, CVE-2026-64440, CVE-2026-64441, CVE-2026-64442,\nCVE-2026-64443, CVE-2026-64444, CVE-2026-64445, CVE-2026-64446,\nCVE-2026-64447, CVE-2026-64448, CVE-2026-64449, CVE-2026-64450,\nCVE-2026-64451, CVE-2026-64452, CVE-2026-64453, CVE-2026-64454,\nCVE-2026-64455, CVE-2026-64456, CVE-2026-64457, CVE-2026-64458,\nCVE-2026-64459, CVE-2026-64460, CVE-2026-64461, CVE-2026-64462,\nCVE-2026-64463, CVE-2026-64464, CVE-2026-64465, CVE-2026-64466,\nCVE-2026-64467, CVE-2026-64468, CVE-2026-64469, CVE-2026-64470,\nCVE-2026-64471, CVE-2026-64472, CVE-2026-64473, CVE-2026-64474,\nCVE-2026-64475, CVE-2026-64476, CVE-2026-64477, CVE-2026-64478,\nCVE-2026-64479, CVE-2026-64480, CVE-2026-64481, CVE-2026-64482,\nCVE-2026-64483, CVE-2026-64484, CVE-2026-64485, CVE-2026-64486,\nCVE-2026-64487, CVE-2026-64488, CVE-2026-64489, CVE-2026-64490,\nCVE-2026-64491, CVE-2026-64492, CVE-2026-64493, CVE-2026-64494,\nCVE-2026-64495, CVE-2026-64496, CVE-2026-64497, CVE-2026-64499,\nCVE-2026-64500, CVE-2026-64501, CVE-2026-64502, CVE-2026-64503,\nCVE-2026-64504, CVE-2026-64505, CVE-2026-64507, CVE-2026-64508,\nCVE-2026-64509, CVE-2026-64510, CVE-2026-64511, CVE-2026-64512,\nCVE-2026-64513, CVE-2026-64514, CVE-2026-64529, CVE-2026-64536,\nCVE-2026-64556, CVE-2026-64588, CVE-2026-64589, CVE-2026-64590,\nCVE-2026-64591, CVE-2026-64592, CVE-2026-64593, CVE-2026-64594,\nCVE-2026-64596, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64601, CVE-2026-64602, CVE-2026-64603,\nCVE-2026-64604, CVE-2026-68084, CVE-2026-68085, CVE-2026-68087,\nCVE-2026-68088, CVE-2026-68089, CVE-2026-68090, CVE-2026-68091,\nCVE-2026-68092, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-21T13:04:36Z","modified":"2026-11-09T12:47:17.861483195Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8726-4","title":"linux-azure, linux-oracle vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53152, CVE-2026-53153, CVE-2026-53154, CVE-2026-53155,\nCVE-2026-53156, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53160, CVE-2026-53161, CVE-2026-53162, CVE-2026-53163,\nCVE-2026-53164, CVE-2026-53165, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53169, CVE-2026-53170, CVE-2026-53171, CVE-2026-53172,\nCVE-2026-53173, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53187, CVE-2026-53188,\nCVE-2026-53189, CVE-2026-53190, CVE-2026-53191, CVE-2026-53192,\nCVE-2026-53193, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,\nCVE-2026-53197, CVE-2026-53198, CVE-2026-53199, CVE-2026-53200,\nCVE-2026-53201, CVE-2026-53202, CVE-2026-53203, CVE-2026-53204,\nCVE-2026-53205, CVE-2026-53206, CVE-2026-53207, CVE-2026-53208,\nCVE-2026-53209, CVE-2026-53210, CVE-2026-53211, CVE-2026-53213,\nCVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53222, CVE-2026-53223, CVE-2026-53226,\nCVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53243,\nCVE-2026-53244, CVE-2026-53245, CVE-2026-53248, CVE-2026-53249,\nCVE-2026-53250, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53257,\nCVE-2026-53258, CVE-2026-53259, CVE-2026-53261, CVE-2026-53262,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270,\nCVE-2026-53271, CVE-2026-53272, CVE-2026-53273, CVE-2026-53274,\nCVE-2026-53275, CVE-2026-53276, CVE-2026-53325, CVE-2026-53326,\nCVE-2026-53327, CVE-2026-53328, CVE-2026-53329, CVE-2026-53330,\nCVE-2026-53331, CVE-2026-53332, CVE-2026-53333, CVE-2026-53334,\nCVE-2026-53335, CVE-2026-53336, CVE-2026-53337, CVE-2026-53338,\nCVE-2026-53339, CVE-2026-53340, CVE-2026-53341, CVE-2026-53342,\nCVE-2026-53343, CVE-2026-53344, CVE-2026-53345, CVE-2026-53346,\nCVE-2026-53347, CVE-2026-53348, CVE-2026-53349, CVE-2026-53350,\nCVE-2026-53351, CVE-2026-53352, CVE-2026-53353, CVE-2026-53354,\nCVE-2026-53355, CVE-2026-53356, CVE-2026-53361, CVE-2026-53362,\nCVE-2026-53363, CVE-2026-53366, CVE-2026-53381, CVE-2026-53382,\nCVE-2026-53383, CVE-2026-53384, CVE-2026-53385, CVE-2026-53386,\nCVE-2026-53387, CVE-2026-53388, CVE-2026-53389, CVE-2026-53390,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53394,\nCVE-2026-53395, CVE-2026-53396, CVE-2026-53397, CVE-2026-53398,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53401, CVE-2026-53402,\nCVE-2026-53403, CVE-2026-63794, CVE-2026-63795, CVE-2026-63796,\nCVE-2026-63797, CVE-2026-63798, CVE-2026-63799, CVE-2026-63800,\nCVE-2026-63801, CVE-2026-63802, CVE-2026-63803, CVE-2026-63804,\nCVE-2026-63805, CVE-2026-63806, CVE-2026-63807, CVE-2026-63808,\nCVE-2026-63809, CVE-2026-63810, CVE-2026-63811, CVE-2026-63812,\nCVE-2026-63813, CVE-2026-63814, CVE-2026-63815, CVE-2026-63816,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63819, CVE-2026-63820,\nCVE-2026-63821, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63825, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63832,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,\nCVE-2026-63871, CVE-2026-63873, CVE-2026-63874, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64192,\nCVE-2026-64205, CVE-2026-64206, CVE-2026-64207, CVE-2026-64244,\nCVE-2026-64245, CVE-2026-64246, CVE-2026-64247, CVE-2026-64249,\nCVE-2026-64251, CVE-2026-64253, CVE-2026-64254, CVE-2026-64255,\nCVE-2026-64256, CVE-2026-64258, CVE-2026-64259, CVE-2026-64260,\nCVE-2026-64261, CVE-2026-64262, CVE-2026-64263, CVE-2026-64264,\nCVE-2026-64265, CVE-2026-64266, CVE-2026-64267, CVE-2026-64268,\nCVE-2026-64269, CVE-2026-64270, CVE-2026-64271, CVE-2026-64272,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64278, CVE-2026-64279, CVE-2026-64280,\nCVE-2026-64282, CVE-2026-64283, CVE-2026-64284, CVE-2026-64285,\nCVE-2026-64286, CVE-2026-64287, CVE-2026-64288, CVE-2026-64289,\nCVE-2026-64290, CVE-2026-64291, CVE-2026-64292, CVE-2026-64293,\nCVE-2026-64294, CVE-2026-64295, CVE-2026-64296, CVE-2026-64297,\nCVE-2026-64298, CVE-2026-64299, CVE-2026-64300, CVE-2026-64301,\nCVE-2026-64302, CVE-2026-64303, CVE-2026-64304, CVE-2026-64305,\nCVE-2026-64306, CVE-2026-64307, CVE-2026-64308, CVE-2026-64309,\nCVE-2026-64310, CVE-2026-64312, CVE-2026-64313, CVE-2026-64314,\nCVE-2026-64315, CVE-2026-64316, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64319, CVE-2026-64320, CVE-2026-64321, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64325, CVE-2026-64326,\nCVE-2026-64327, CVE-2026-64328, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64339, CVE-2026-64340, CVE-2026-64341, CVE-2026-64342,\nCVE-2026-64343, CVE-2026-64344, CVE-2026-64345, CVE-2026-64346,\nCVE-2026-64347, CVE-2026-64348, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64353, CVE-2026-64354, CVE-2026-64355,\nCVE-2026-64356, CVE-2026-64357, CVE-2026-64358, CVE-2026-64359,\nCVE-2026-64360, CVE-2026-64361, CVE-2026-64362, CVE-2026-64363,\nCVE-2026-64364, CVE-2026-64365, CVE-2026-64366, CVE-2026-64367,\nCVE-2026-64368, CVE-2026-64369, CVE-2026-64370, CVE-2026-64371,\nCVE-2026-64372, CVE-2026-64373, CVE-2026-64374, CVE-2026-64375,\nCVE-2026-64376, CVE-2026-64377, CVE-2026-64378, CVE-2026-64379,\nCVE-2026-64380, CVE-2026-64381, CVE-2026-64382, CVE-2026-64383,\nCVE-2026-64384, CVE-2026-64385, CVE-2026-64386, CVE-2026-64387,\nCVE-2026-64388, CVE-2026-64389, CVE-2026-64390, CVE-2026-64391,\nCVE-2026-64392, CVE-2026-64393, CVE-2026-64394, CVE-2026-64395,\nCVE-2026-64396, CVE-2026-64397, CVE-2026-64398, CVE-2026-64399,\nCVE-2026-64400, CVE-2026-64401, CVE-2026-64402, CVE-2026-64403,\nCVE-2026-64404, CVE-2026-64405, CVE-2026-64406, CVE-2026-64407,\nCVE-2026-64408, CVE-2026-64409, CVE-2026-64410, CVE-2026-64411,\nCVE-2026-64412, CVE-2026-64413, CVE-2026-64414, CVE-2026-64415,\nCVE-2026-64416, CVE-2026-64417, CVE-2026-64418, CVE-2026-64419,\nCVE-2026-64420, CVE-2026-64421, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64424, CVE-2026-64425, CVE-2026-64426, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64433,\nCVE-2026-64434, CVE-2026-64435, CVE-2026-64436, CVE-2026-64438,\nCVE-2026-64439, CVE-2026-64440, CVE-2026-64441, CVE-2026-64442,\nCVE-2026-64443, CVE-2026-64444, CVE-2026-64445, CVE-2026-64446,\nCVE-2026-64447, CVE-2026-64448, CVE-2026-64449, CVE-2026-64450,\nCVE-2026-64451, CVE-2026-64452, CVE-2026-64453, CVE-2026-64454,\nCVE-2026-64455, CVE-2026-64456, CVE-2026-64457, CVE-2026-64458,\nCVE-2026-64459, CVE-2026-64460, CVE-2026-64461, CVE-2026-64462,\nCVE-2026-64463, CVE-2026-64464, CVE-2026-64465, CVE-2026-64466,\nCVE-2026-64467, CVE-2026-64468, CVE-2026-64469, CVE-2026-64470,\nCVE-2026-64471, CVE-2026-64472, CVE-2026-64473, CVE-2026-64474,\nCVE-2026-64475, CVE-2026-64476, CVE-2026-64477, CVE-2026-64478,\nCVE-2026-64479, CVE-2026-64480, CVE-2026-64481, CVE-2026-64482,\nCVE-2026-64483, CVE-2026-64484, CVE-2026-64485, CVE-2026-64486,\nCVE-2026-64487, CVE-2026-64488, CVE-2026-64489, CVE-2026-64490,\nCVE-2026-64491, CVE-2026-64492, CVE-2026-64493, CVE-2026-64494,\nCVE-2026-64495, CVE-2026-64496, CVE-2026-64497, CVE-2026-64499,\nCVE-2026-64500, CVE-2026-64501, CVE-2026-64502, CVE-2026-64503,\nCVE-2026-64504, CVE-2026-64505, CVE-2026-64507, CVE-2026-64508,\nCVE-2026-64509, CVE-2026-64510, CVE-2026-64511, CVE-2026-64512,\nCVE-2026-64513, CVE-2026-64514, CVE-2026-64529, CVE-2026-64536,\nCVE-2026-64556, CVE-2026-64588, CVE-2026-64589, CVE-2026-64590,\nCVE-2026-64591, CVE-2026-64592, CVE-2026-64593, CVE-2026-64594,\nCVE-2026-64596, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64601, CVE-2026-64602, CVE-2026-64603,\nCVE-2026-64604, CVE-2026-68084, CVE-2026-68085, CVE-2026-68087,\nCVE-2026-68088, CVE-2026-68089, CVE-2026-68090, CVE-2026-68091,\nCVE-2026-68092, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-22T13:19:27Z","modified":"2026-11-09T12:47:50.410875293Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8727-1","title":"linux-oem-7.0 vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53152,\nCVE-2026-53153, CVE-2026-53154, CVE-2026-53155, CVE-2026-53156,\nCVE-2026-53157, CVE-2026-53158, CVE-2026-53159, CVE-2026-53160,\nCVE-2026-53161, CVE-2026-53162, CVE-2026-53163, CVE-2026-53164,\nCVE-2026-53165, CVE-2026-53167, CVE-2026-53168, CVE-2026-53169,\nCVE-2026-53170, CVE-2026-53171, CVE-2026-53172, CVE-2026-53173,\nCVE-2026-53177, CVE-2026-53178, CVE-2026-53179, CVE-2026-53180,\nCVE-2026-53181, CVE-2026-53182, CVE-2026-53183, CVE-2026-53184,\nCVE-2026-53185, CVE-2026-53187, CVE-2026-53188, CVE-2026-53189,\nCVE-2026-53190, CVE-2026-53191, CVE-2026-53192, CVE-2026-53193,\nCVE-2026-53194, CVE-2026-53195, CVE-2026-53196, CVE-2026-53197,\nCVE-2026-53198, CVE-2026-53199, CVE-2026-53200, CVE-2026-53201,\nCVE-2026-53202, CVE-2026-53203, CVE-2026-53204, CVE-2026-53205,\nCVE-2026-53206, CVE-2026-53207, CVE-2026-53208, CVE-2026-53209,\nCVE-2026-53210, CVE-2026-53211, CVE-2026-53213, CVE-2026-53214,\nCVE-2026-53217, CVE-2026-53218, CVE-2026-53219, CVE-2026-53220,\nCVE-2026-53222, CVE-2026-53223, CVE-2026-53226, CVE-2026-53227,\nCVE-2026-53229, CVE-2026-53230, CVE-2026-53231, CVE-2026-53232,\nCVE-2026-53233, CVE-2026-53234, CVE-2026-53235, CVE-2026-53236,\nCVE-2026-53237, CVE-2026-53238, CVE-2026-53239, CVE-2026-53240,\nCVE-2026-53241, CVE-2026-53242, CVE-2026-53243, CVE-2026-53244,\nCVE-2026-53245, CVE-2026-53248, CVE-2026-53249, CVE-2026-53250,\nCVE-2026-53251, CVE-2026-53252, CVE-2026-53253, CVE-2026-53254,\nCVE-2026-53255, CVE-2026-53256, CVE-2026-53257, CVE-2026-53258,\nCVE-2026-53259, CVE-2026-53261, CVE-2026-53262, CVE-2026-53263,\nCVE-2026-53264, CVE-2026-53265, CVE-2026-53266, CVE-2026-53267,\nCVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53271,\nCVE-2026-53272, CVE-2026-53273, CVE-2026-53274, CVE-2026-53275,\nCVE-2026-53276, CVE-2026-53325, CVE-2026-53326, CVE-2026-53327,\nCVE-2026-53328, CVE-2026-53329, CVE-2026-53330, CVE-2026-53331,\nCVE-2026-53332, CVE-2026-53333, CVE-2026-53334, CVE-2026-53335,\nCVE-2026-53336, CVE-2026-53337, CVE-2026-53338, CVE-2026-53339,\nCVE-2026-53340, CVE-2026-53341, CVE-2026-53342, CVE-2026-53343,\nCVE-2026-53344, CVE-2026-53345, CVE-2026-53346, CVE-2026-53347,\nCVE-2026-53348, CVE-2026-53349, CVE-2026-53350, CVE-2026-53351,\nCVE-2026-53352, CVE-2026-53353, CVE-2026-53354, CVE-2026-53355,\nCVE-2026-53356, CVE-2026-53361, CVE-2026-53362, CVE-2026-53363,\nCVE-2026-53366, CVE-2026-53381, CVE-2026-53382, CVE-2026-53383,\nCVE-2026-53384, CVE-2026-53385, CVE-2026-53386, CVE-2026-53387,\nCVE-2026-53388, CVE-2026-53389, CVE-2026-53390, CVE-2026-53391,\nCVE-2026-53392, CVE-2026-53393, CVE-2026-53394, CVE-2026-53395,\nCVE-2026-53396, CVE-2026-53397, CVE-2026-53398, CVE-2026-53399,\nCVE-2026-53400, CVE-2026-53401, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63795, CVE-2026-63796, CVE-2026-63797,\nCVE-2026-63798, CVE-2026-63799, CVE-2026-63800, CVE-2026-63801,\nCVE-2026-63802, CVE-2026-63803, CVE-2026-63804, CVE-2026-63805,\nCVE-2026-63806, CVE-2026-63807, CVE-2026-63808, CVE-2026-63809,\nCVE-2026-63810, CVE-2026-63811, CVE-2026-63812, CVE-2026-63813,\nCVE-2026-63814, CVE-2026-63815, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63819, CVE-2026-63820, CVE-2026-63821,\nCVE-2026-63822, CVE-2026-63823, CVE-2026-63824, CVE-2026-63825,\nCVE-2026-63826, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829,\nCVE-2026-63830, CVE-2026-63831, CVE-2026-63832, CVE-2026-63833,\nCVE-2026-63834, CVE-2026-63835, CVE-2026-63836, CVE-2026-63867,\nCVE-2026-63868, CVE-2026-63869, CVE-2026-63870, CVE-2026-63871,\nCVE-2026-63873, CVE-2026-63874, CVE-2026-64187, CVE-2026-64188,\nCVE-2026-64189, CVE-2026-64191, CVE-2026-64192, CVE-2026-64205,\nCVE-2026-64206, CVE-2026-64207, CVE-2026-64244, CVE-2026-64245,\nCVE-2026-64246, CVE-2026-64247, CVE-2026-64249, CVE-2026-64251,\nCVE-2026-64253, CVE-2026-64254, CVE-2026-64255, CVE-2026-64256,\nCVE-2026-64258, CVE-2026-64259, CVE-2026-64260, CVE-2026-64261,\nCVE-2026-64262, CVE-2026-64263, CVE-2026-64264, CVE-2026-64265,\nCVE-2026-64266, CVE-2026-64267, CVE-2026-64268, CVE-2026-64269,\nCVE-2026-64270, CVE-2026-64271, CVE-2026-64272, CVE-2026-64273,\nCVE-2026-64274, CVE-2026-64275, CVE-2026-64276, CVE-2026-64277,\nCVE-2026-64278, CVE-2026-64279, CVE-2026-64280, CVE-2026-64282,\nCVE-2026-64283, CVE-2026-64284, CVE-2026-64285, CVE-2026-64286,\nCVE-2026-64287, CVE-2026-64288, CVE-2026-64289, CVE-2026-64290,\nCVE-2026-64291, CVE-2026-64292, CVE-2026-64293, CVE-2026-64294,\nCVE-2026-64295, CVE-2026-64296, CVE-2026-64297, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64300, CVE-2026-64301, CVE-2026-64302,\nCVE-2026-64303, CVE-2026-64304, CVE-2026-64305, CVE-2026-64306,\nCVE-2026-64307, CVE-2026-64308, CVE-2026-64309, CVE-2026-64310,\nCVE-2026-64312, CVE-2026-64313, CVE-2026-64314, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64319,\nCVE-2026-64320, CVE-2026-64321, CVE-2026-64322, CVE-2026-64323,\nCVE-2026-64324, CVE-2026-64325, CVE-2026-64326, CVE-2026-64327,\nCVE-2026-64328, CVE-2026-64329, CVE-2026-64330, CVE-2026-64331,\nCVE-2026-64332, CVE-2026-64333, CVE-2026-64334, CVE-2026-64335,\nCVE-2026-64336, CVE-2026-64337, CVE-2026-64338, CVE-2026-64339,\nCVE-2026-64340, CVE-2026-64341, CVE-2026-64342, CVE-2026-64343,\nCVE-2026-64344, CVE-2026-64345, CVE-2026-64346, CVE-2026-64347,\nCVE-2026-64348, CVE-2026-64350, CVE-2026-64351, CVE-2026-64352,\nCVE-2026-64353, CVE-2026-64354, CVE-2026-64355, CVE-2026-64356,\nCVE-2026-64357, CVE-2026-64358, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64365, CVE-2026-64366, CVE-2026-64367, CVE-2026-64368,\nCVE-2026-64369, CVE-2026-64370, CVE-2026-64371, CVE-2026-64372,\nCVE-2026-64373, CVE-2026-64374, CVE-2026-64375, CVE-2026-64376,\nCVE-2026-64377, CVE-2026-64378, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64382, CVE-2026-64383, CVE-2026-64384,\nCVE-2026-64385, CVE-2026-64386, CVE-2026-64387, CVE-2026-64388,\nCVE-2026-64389, CVE-2026-64390, CVE-2026-64391, CVE-2026-64392,\nCVE-2026-64393, CVE-2026-64394, CVE-2026-64395, CVE-2026-64396,\nCVE-2026-64397, CVE-2026-64398, CVE-2026-64399, CVE-2026-64400,\nCVE-2026-64401, CVE-2026-64402, CVE-2026-64403, CVE-2026-64404,\nCVE-2026-64405, CVE-2026-64406, CVE-2026-64407, CVE-2026-64408,\nCVE-2026-64409, CVE-2026-64410, CVE-2026-64411, CVE-2026-64412,\nCVE-2026-64413, CVE-2026-64414, CVE-2026-64415, CVE-2026-64416,\nCVE-2026-64417, CVE-2026-64418, CVE-2026-64419, CVE-2026-64420,\nCVE-2026-64421, CVE-2026-64422, CVE-2026-64423, CVE-2026-64424,\nCVE-2026-64425, CVE-2026-64426, CVE-2026-64428, CVE-2026-64429,\nCVE-2026-64430, CVE-2026-64432, CVE-2026-64433, CVE-2026-64434,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64439,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64447,\nCVE-2026-64448, CVE-2026-64449, CVE-2026-64450, CVE-2026-64451,\nCVE-2026-64452, CVE-2026-64453, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64457, CVE-2026-64458, CVE-2026-64459,\nCVE-2026-64460, CVE-2026-64461, CVE-2026-64462, CVE-2026-64463,\nCVE-2026-64464, CVE-2026-64465, CVE-2026-64466, CVE-2026-64467,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64472, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475,\nCVE-2026-64476, CVE-2026-64477, CVE-2026-64478, CVE-2026-64479,\nCVE-2026-64480, CVE-2026-64481, CVE-2026-64482, CVE-2026-64483,\nCVE-2026-64484, CVE-2026-64485, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64490, CVE-2026-64491,\nCVE-2026-64492, CVE-2026-64493, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64499, CVE-2026-64500,\nCVE-2026-64501, CVE-2026-64502, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64507, CVE-2026-64508, CVE-2026-64509,\nCVE-2026-64510, CVE-2026-64511, CVE-2026-64512, CVE-2026-64513,\nCVE-2026-64514, CVE-2026-64529, CVE-2026-64536, CVE-2026-64556,\nCVE-2026-64588, CVE-2026-64589, CVE-2026-64590, CVE-2026-64591,\nCVE-2026-64592, CVE-2026-64593, CVE-2026-64594, CVE-2026-64596,\nCVE-2026-64597, CVE-2026-64598, CVE-2026-64599, CVE-2026-64600,\nCVE-2026-64601, CVE-2026-64602, CVE-2026-64603, CVE-2026-64604,\nCVE-2026-68084, CVE-2026-68085, CVE-2026-68087, CVE-2026-68088,\nCVE-2026-68089, CVE-2026-68090, CVE-2026-68091, CVE-2026-68092,\nCVE-2026-68372, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-07T09:02:08Z","modified":"2026-11-09T12:47:18.181465645Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8728-1","title":"linux-gcp-7.0 vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - x86 platform drivers;\n  - ARM64 architecture;\n  - Cryptographic API;\n  - PSP security protocol;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Auxiliary display drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Hardware random number generator core;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - EFI core;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - FWCTL subsystem;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - NVIDIA Tegra memory controller driver;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Chrome hardware platform drivers;\n  - ACPI WMI driver;\n  - Generic PM domains;\n  - MediaTek PM domains;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - Power supply drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - MPAM driver;\n  - Amlogic Meson reset controller drivers;\n  - RPMSG subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - NVIDIA Tegra Control Backbone (CBB) driver;\n  - SPI subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Userspace I/O drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM AMD SEV Guest driver;\n  - Virtio drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - File systems infrastructure;\n  - AFS file system;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - HugeTLB file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Proc file system;\n  - Diskquota system;\n  - SMB network file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - DRM TTM subsystem;\n  - Key management;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Memory management;\n  - Tracing infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Freescale ENETC Ethernet drivers;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Linked list library;\n  - Mellanox drivers;\n  - Netfilter;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Networking core;\n  - Network shaper API;\n  - Network sockets;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - DMA mapping infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - IRQ subsystem;\n  - Kexec HandOver (KHO);\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Scatterlist API;\n  - KProbes tracing;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 802.1Q VLAN protocol;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Ceph Core library;\n  - Devlink API;\n  - Distributed Switch Architecture;\n  - Ethtool driver;\n  - Handshake API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IUCV driver;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Integrity Measurement Architecture(IMA) framework;\n  - SELinux security module;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - AudioScience HPI driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - FourSemi audio codecs;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - Simple audio multiplexer codec driver;\n  - Wolfson Microelectronics audio codecs;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-43490, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43498, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45837, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-46104, CVE-2026-46105, CVE-2026-46106, CVE-2026-46107,\nCVE-2026-46108, CVE-2026-46109, CVE-2026-46110, CVE-2026-46111,\nCVE-2026-46112, CVE-2026-46113, CVE-2026-46114, CVE-2026-46115,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46118, CVE-2026-46119,\nCVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123,\nCVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127,\nCVE-2026-46128, CVE-2026-46129, CVE-2026-46130, CVE-2026-46131,\nCVE-2026-46132, CVE-2026-46133, CVE-2026-46134, CVE-2026-46135,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46140, CVE-2026-46141, CVE-2026-46142, CVE-2026-46143,\nCVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46148,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46153, CVE-2026-46154, CVE-2026-46155, CVE-2026-46156,\nCVE-2026-46157, CVE-2026-46158, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46162, CVE-2026-46163, CVE-2026-46164,\nCVE-2026-46165, CVE-2026-46166, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46170, CVE-2026-46171, CVE-2026-46172,\nCVE-2026-46173, CVE-2026-46174, CVE-2026-46175, CVE-2026-46176,\nCVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180,\nCVE-2026-46181, CVE-2026-46182, CVE-2026-46183, CVE-2026-46184,\nCVE-2026-46185, CVE-2026-46186, CVE-2026-46187, CVE-2026-46188,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46192,\nCVE-2026-46193, CVE-2026-46195, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46202, CVE-2026-46203, CVE-2026-46204, CVE-2026-46205,\nCVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209,\nCVE-2026-46210, CVE-2026-46211, CVE-2026-46212, CVE-2026-46213,\nCVE-2026-46214, CVE-2026-46215, CVE-2026-46216, CVE-2026-46218,\nCVE-2026-46219, CVE-2026-46220, CVE-2026-46221, CVE-2026-46222,\nCVE-2026-46223, CVE-2026-46224, CVE-2026-46225, CVE-2026-46226,\nCVE-2026-46227, CVE-2026-46228, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46239,\nCVE-2026-46240, CVE-2026-46241, CVE-2026-46242, CVE-2026-46243,\nCVE-2026-46244, CVE-2026-46273, CVE-2026-46274, CVE-2026-46275,\nCVE-2026-46289, CVE-2026-46290, CVE-2026-46291, CVE-2026-46292,\nCVE-2026-46293, CVE-2026-46294, CVE-2026-46295, CVE-2026-46296,\nCVE-2026-46297, CVE-2026-46298, CVE-2026-46299, CVE-2026-46301,\nCVE-2026-46302, CVE-2026-46303, CVE-2026-46304, CVE-2026-46305,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46308, CVE-2026-46309,\nCVE-2026-46310, CVE-2026-46311, CVE-2026-46312, CVE-2026-46313,\nCVE-2026-46314, CVE-2026-46315, CVE-2026-46316, CVE-2026-46317,\nCVE-2026-46318, CVE-2026-46319, CVE-2026-46320, CVE-2026-46321,\nCVE-2026-46322, CVE-2026-46324, CVE-2026-46331, CVE-2026-52908,\nCVE-2026-52909, CVE-2026-52910, CVE-2026-52911, CVE-2026-52912,\nCVE-2026-52913, CVE-2026-52914, CVE-2026-52915, CVE-2026-52916,\nCVE-2026-52917, CVE-2026-52918, CVE-2026-52919, CVE-2026-52920,\nCVE-2026-52921, CVE-2026-52922, CVE-2026-52923, CVE-2026-52924,\nCVE-2026-52925, CVE-2026-52926, CVE-2026-52927, CVE-2026-52928,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52931, CVE-2026-52932,\nCVE-2026-52934, CVE-2026-52935, CVE-2026-52936, CVE-2026-52937,\nCVE-2026-52938, CVE-2026-52939, CVE-2026-52940, CVE-2026-52941,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52944, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-52949, CVE-2026-52950, CVE-2026-52951,\nCVE-2026-52952, CVE-2026-52953, CVE-2026-52954, CVE-2026-52955,\nCVE-2026-52956, CVE-2026-52957, CVE-2026-52958, CVE-2026-52959,\nCVE-2026-52960, CVE-2026-52961, CVE-2026-52962, CVE-2026-52963,\nCVE-2026-52964, CVE-2026-52965, CVE-2026-52967, CVE-2026-52968,\nCVE-2026-52969, CVE-2026-52970, CVE-2026-52971, CVE-2026-52973,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52976, CVE-2026-52977,\nCVE-2026-52978, CVE-2026-52979, CVE-2026-52980, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52983, CVE-2026-52984, CVE-2026-52985,\nCVE-2026-52986, CVE-2026-52987, CVE-2026-52988, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52991, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52994, CVE-2026-52995, CVE-2026-52996, CVE-2026-52997,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53000, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53005,\nCVE-2026-53006, CVE-2026-53007, CVE-2026-53008, CVE-2026-53009,\nCVE-2026-53010, CVE-2026-53011, CVE-2026-53012, CVE-2026-53013,\nCVE-2026-53014, CVE-2026-53015, CVE-2026-53016, CVE-2026-53017,\nCVE-2026-53018, CVE-2026-53019, CVE-2026-53020, CVE-2026-53021,\nCVE-2026-53022, CVE-2026-53023, CVE-2026-53024, CVE-2026-53025,\nCVE-2026-53026, CVE-2026-53027, CVE-2026-53028, CVE-2026-53029,\nCVE-2026-53030, CVE-2026-53031, CVE-2026-53032, CVE-2026-53033,\nCVE-2026-53034, CVE-2026-53035, CVE-2026-53036, CVE-2026-53037,\nCVE-2026-53038, CVE-2026-53039, CVE-2026-53040, CVE-2026-53041,\nCVE-2026-53042, CVE-2026-53043, CVE-2026-53044, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53051, CVE-2026-53052, CVE-2026-53053,\nCVE-2026-53054, CVE-2026-53055, CVE-2026-53056, CVE-2026-53057,\nCVE-2026-53058, CVE-2026-53059, CVE-2026-53060, CVE-2026-53061,\nCVE-2026-53062, CVE-2026-53063, CVE-2026-53064, CVE-2026-53065,\nCVE-2026-53066, CVE-2026-53067, CVE-2026-53068, CVE-2026-53069,\nCVE-2026-53070, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53078, CVE-2026-53079, CVE-2026-53080, CVE-2026-53081,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53087, CVE-2026-53088, CVE-2026-53089,\nCVE-2026-53090, CVE-2026-53091, CVE-2026-53092, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53095, CVE-2026-53096, CVE-2026-53097,\nCVE-2026-53098, CVE-2026-53099, CVE-2026-53100, CVE-2026-53101,\nCVE-2026-53102, CVE-2026-53103, CVE-2026-53104, CVE-2026-53105,\nCVE-2026-53106, CVE-2026-53107, CVE-2026-53108, CVE-2026-53109,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53113,\nCVE-2026-53114, CVE-2026-53115, CVE-2026-53116, CVE-2026-53117,\nCVE-2026-53118, CVE-2026-53119, CVE-2026-53120, CVE-2026-53121,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53124, CVE-2026-53125,\nCVE-2026-53126, CVE-2026-53127, CVE-2026-53128, CVE-2026-53129,\nCVE-2026-53130, CVE-2026-53131, CVE-2026-53132, CVE-2026-53133,\nCVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53139, CVE-2026-53140, CVE-2026-53141,\nCVE-2026-53142, CVE-2026-53143, CVE-2026-53144, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53151, CVE-2026-53152, CVE-2026-53153, CVE-2026-53154,\nCVE-2026-53155, CVE-2026-53156, CVE-2026-53157, CVE-2026-53158,\nCVE-2026-53159, CVE-2026-53160, CVE-2026-53161, CVE-2026-53162,\nCVE-2026-53163, CVE-2026-53164, CVE-2026-53165, CVE-2026-53167,\nCVE-2026-53168, CVE-2026-53169, CVE-2026-53170, CVE-2026-53171,\nCVE-2026-53172, CVE-2026-53173, CVE-2026-53174, CVE-2026-53175,\nCVE-2026-53176, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53186, CVE-2026-53187,\nCVE-2026-53188, CVE-2026-53189, CVE-2026-53190, CVE-2026-53191,\nCVE-2026-53192, CVE-2026-53193, CVE-2026-53194, CVE-2026-53195,\nCVE-2026-53196, CVE-2026-53197, CVE-2026-53198, CVE-2026-53199,\nCVE-2026-53200, CVE-2026-53201, CVE-2026-53202, CVE-2026-53203,\nCVE-2026-53204, CVE-2026-53205, CVE-2026-53206, CVE-2026-53207,\nCVE-2026-53208, CVE-2026-53209, CVE-2026-53210, CVE-2026-53211,\nCVE-2026-53212, CVE-2026-53213, CVE-2026-53214, CVE-2026-53215,\nCVE-2026-53216, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53221, CVE-2026-53222, CVE-2026-53223,\nCVE-2026-53224, CVE-2026-53225, CVE-2026-53226, CVE-2026-53227,\nCVE-2026-53228, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53244,\nCVE-2026-53245, CVE-2026-53246, CVE-2026-53247, CVE-2026-53248,\nCVE-2026-53249, CVE-2026-53250, CVE-2026-53251, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53257, CVE-2026-53258, CVE-2026-53259, CVE-2026-53260,\nCVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264,\nCVE-2026-53266, CVE-2026-53267, CVE-2026-53268, CVE-2026-53269,\nCVE-2026-53270, CVE-2026-53271, CVE-2026-53272, CVE-2026-53273,\nCVE-2026-53274, CVE-2026-53275, CVE-2026-53276, CVE-2026-53277,\nCVE-2026-53278, CVE-2026-53279, CVE-2026-53280, CVE-2026-53281,\nCVE-2026-53282, CVE-2026-53283, CVE-2026-53284, CVE-2026-53285,\nCVE-2026-53286, CVE-2026-53287, CVE-2026-53288, CVE-2026-53289,\nCVE-2026-53290, CVE-2026-53291, CVE-2026-53292, CVE-2026-53293,\nCVE-2026-53294, CVE-2026-53295, CVE-2026-53296, CVE-2026-53297,\nCVE-2026-53298, CVE-2026-53299, CVE-2026-53300, CVE-2026-53301,\nCVE-2026-53302, CVE-2026-53303, CVE-2026-53304, CVE-2026-53305,\nCVE-2026-53306, CVE-2026-53307, CVE-2026-53308, CVE-2026-53309,\nCVE-2026-53310, CVE-2026-53311, CVE-2026-53312, CVE-2026-53313,\nCVE-2026-53314, CVE-2026-53315, CVE-2026-53316, CVE-2026-53317,\nCVE-2026-53318, CVE-2026-53319, CVE-2026-53320, CVE-2026-53321,\nCVE-2026-53322, CVE-2026-53323, CVE-2026-53324, CVE-2026-53325,\nCVE-2026-53326, CVE-2026-53327, CVE-2026-53328, CVE-2026-53329,\nCVE-2026-53330, CVE-2026-53331, CVE-2026-53332, CVE-2026-53333,\nCVE-2026-53334, CVE-2026-53335, CVE-2026-53336, CVE-2026-53337,\nCVE-2026-53338, CVE-2026-53339, CVE-2026-53340, CVE-2026-53341,\nCVE-2026-53342, CVE-2026-53343, CVE-2026-53344, CVE-2026-53345,\nCVE-2026-53346, CVE-2026-53347, CVE-2026-53348, CVE-2026-53349,\nCVE-2026-53350, CVE-2026-53351, CVE-2026-53352, CVE-2026-53353,\nCVE-2026-53354, CVE-2026-53355, CVE-2026-53356, CVE-2026-53357,\nCVE-2026-53358, CVE-2026-53359, CVE-2026-53360, CVE-2026-53361,\nCVE-2026-53362, CVE-2026-53363, CVE-2026-53364, CVE-2026-53365,\nCVE-2026-53366, CVE-2026-53367, CVE-2026-53368, CVE-2026-53369,\nCVE-2026-53370, CVE-2026-53371, CVE-2026-53372, CVE-2026-53373,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53377,\nCVE-2026-53378, CVE-2026-53379, CVE-2026-53380, CVE-2026-53381,\nCVE-2026-53382, CVE-2026-53383, CVE-2026-53384, CVE-2026-53385,\nCVE-2026-53386, CVE-2026-53387, CVE-2026-53388, CVE-2026-53389,\nCVE-2026-53390, CVE-2026-53391, CVE-2026-53392, CVE-2026-53393,\nCVE-2026-53394, CVE-2026-53395, CVE-2026-53396, CVE-2026-53397,\nCVE-2026-53398, CVE-2026-53399, CVE-2026-53400, CVE-2026-53401,\nCVE-2026-53402, CVE-2026-53403, CVE-2026-63794, CVE-2026-63795,\nCVE-2026-63796, CVE-2026-63797, CVE-2026-63798, CVE-2026-63799,\nCVE-2026-63800, CVE-2026-63801, CVE-2026-63802, CVE-2026-63803,\nCVE-2026-63804, CVE-2026-63805, CVE-2026-63806, CVE-2026-63807,\nCVE-2026-63808, CVE-2026-63809, CVE-2026-63810, CVE-2026-63811,\nCVE-2026-63813, CVE-2026-63814, CVE-2026-63815, CVE-2026-63816,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63819, CVE-2026-63820,\nCVE-2026-63821, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63825, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63832,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63837, CVE-2026-63838, CVE-2026-63839, CVE-2026-63840,\nCVE-2026-63841, CVE-2026-63842, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63849, CVE-2026-63850, CVE-2026-63851, CVE-2026-63852,\nCVE-2026-63853, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63857, CVE-2026-63858, CVE-2026-63859, CVE-2026-63860,\nCVE-2026-63861, CVE-2026-63862, CVE-2026-63863, CVE-2026-63864,\nCVE-2026-63865, CVE-2026-63866, CVE-2026-63867, CVE-2026-63868,\nCVE-2026-63869, CVE-2026-63870, CVE-2026-63871, CVE-2026-63873,\nCVE-2026-63874, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877,\nCVE-2026-63878, CVE-2026-63879, CVE-2026-63880, CVE-2026-63881,\nCVE-2026-63882, CVE-2026-63883, CVE-2026-63884, CVE-2026-63886,\nCVE-2026-63887, CVE-2026-63888, CVE-2026-63889, CVE-2026-63890,\nCVE-2026-63891, CVE-2026-63892, CVE-2026-63893, CVE-2026-63894,\nCVE-2026-63895, CVE-2026-63896, CVE-2026-63897, CVE-2026-63898,\nCVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,\nCVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63906,\nCVE-2026-63907, CVE-2026-63908, CVE-2026-63909, CVE-2026-63910,\nCVE-2026-63911, CVE-2026-63912, CVE-2026-63913, CVE-2026-63914,\nCVE-2026-63915, CVE-2026-63916, CVE-2026-63917, CVE-2026-63918,\nCVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63922,\nCVE-2026-63923, CVE-2026-63924, CVE-2026-63925, CVE-2026-63926,\nCVE-2026-63927, CVE-2026-63928, CVE-2026-63929, CVE-2026-63930,\nCVE-2026-63931, CVE-2026-63932, CVE-2026-63933, CVE-2026-63934,\nCVE-2026-63935, CVE-2026-63936, CVE-2026-63937, CVE-2026-63938,\nCVE-2026-63939, CVE-2026-63940, CVE-2026-63941, CVE-2026-63942,\nCVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946,\nCVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63950,\nCVE-2026-63951, CVE-2026-63952, CVE-2026-63953, CVE-2026-63954,\nCVE-2026-63955, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958,\nCVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63962,\nCVE-2026-63963, CVE-2026-63964, CVE-2026-63965, CVE-2026-63966,\nCVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63970,\nCVE-2026-63971, CVE-2026-63972, CVE-2026-63973, CVE-2026-63974,\nCVE-2026-63975, CVE-2026-63976, CVE-2026-63977, CVE-2026-63978,\nCVE-2026-63979, CVE-2026-63980, CVE-2026-63981, CVE-2026-63982,\nCVE-2026-63983, CVE-2026-63984, CVE-2026-63985, CVE-2026-63986,\nCVE-2026-63987, CVE-2026-63988, CVE-2026-63989, CVE-2026-63990,\nCVE-2026-63991, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994,\nCVE-2026-63995, CVE-2026-63996, CVE-2026-63997, CVE-2026-63998,\nCVE-2026-63999, CVE-2026-64000, CVE-2026-64001, CVE-2026-64002,\nCVE-2026-64003, CVE-2026-64004, CVE-2026-64005, CVE-2026-64006,\nCVE-2026-64007, CVE-2026-64008, CVE-2026-64009, CVE-2026-64010,\nCVE-2026-64011, CVE-2026-64012, CVE-2026-64013, CVE-2026-64014,\nCVE-2026-64015, CVE-2026-64017, CVE-2026-64018, CVE-2026-64019,\nCVE-2026-64020, CVE-2026-64021, CVE-2026-64022, CVE-2026-64023,\nCVE-2026-64024, CVE-2026-64025, CVE-2026-64026, CVE-2026-64027,\nCVE-2026-64029, CVE-2026-64030, CVE-2026-64031, CVE-2026-64032,\nCVE-2026-64033, CVE-2026-64034, CVE-2026-64035, CVE-2026-64036,\nCVE-2026-64037, CVE-2026-64038, CVE-2026-64039, CVE-2026-64040,\nCVE-2026-64041, CVE-2026-64042, CVE-2026-64043, CVE-2026-64044,\nCVE-2026-64045, CVE-2026-64046, CVE-2026-64047, CVE-2026-64048,\nCVE-2026-64049, CVE-2026-64050, CVE-2026-64051, CVE-2026-64052,\nCVE-2026-64053, CVE-2026-64054, CVE-2026-64055, CVE-2026-64056,\nCVE-2026-64057, CVE-2026-64058, CVE-2026-64059, CVE-2026-64060,\nCVE-2026-64061, CVE-2026-64062, CVE-2026-64063, CVE-2026-64064,\nCVE-2026-64065, CVE-2026-64066, CVE-2026-64067, CVE-2026-64068,\nCVE-2026-64069, CVE-2026-64070, CVE-2026-64071, CVE-2026-64072,\nCVE-2026-64073, CVE-2026-64074, CVE-2026-64075, CVE-2026-64076,\nCVE-2026-64077, CVE-2026-64078, CVE-2026-64079, CVE-2026-64080,\nCVE-2026-64081, CVE-2026-64082, CVE-2026-64083, CVE-2026-64084,\nCVE-2026-64085, CVE-2026-64086, CVE-2026-64087, CVE-2026-64088,\nCVE-2026-64089, CVE-2026-64090, CVE-2026-64091, CVE-2026-64093,\nCVE-2026-64094, CVE-2026-64095, CVE-2026-64096, CVE-2026-64097,\nCVE-2026-64098, CVE-2026-64099, CVE-2026-64100, CVE-2026-64101,\nCVE-2026-64102, CVE-2026-64103, CVE-2026-64104, CVE-2026-64105,\nCVE-2026-64106, CVE-2026-64107, CVE-2026-64108, CVE-2026-64109,\nCVE-2026-64110, CVE-2026-64111, CVE-2026-64112, CVE-2026-64113,\nCVE-2026-64114, CVE-2026-64115, CVE-2026-64116, CVE-2026-64117,\nCVE-2026-64118, CVE-2026-64119, CVE-2026-64120, CVE-2026-64121,\nCVE-2026-64122, CVE-2026-64123, CVE-2026-64124, CVE-2026-64125,\nCVE-2026-64126, CVE-2026-64127, CVE-2026-64128, CVE-2026-64129,\nCVE-2026-64130, CVE-2026-64131, CVE-2026-64132, CVE-2026-64133,\nCVE-2026-64134, CVE-2026-64135, CVE-2026-64136, CVE-2026-64137,\nCVE-2026-64138, CVE-2026-64139, CVE-2026-64140, CVE-2026-64141,\nCVE-2026-64142, CVE-2026-64143, CVE-2026-64144, CVE-2026-64145,\nCVE-2026-64146, CVE-2026-64147, CVE-2026-64148, CVE-2026-64149,\nCVE-2026-64150, CVE-2026-64151, CVE-2026-64152, CVE-2026-64153,\nCVE-2026-64154, CVE-2026-64155, CVE-2026-64156, CVE-2026-64157,\nCVE-2026-64159, CVE-2026-64160, CVE-2026-64161, CVE-2026-64162,\nCVE-2026-64163, CVE-2026-64164, CVE-2026-64165, CVE-2026-64166,\nCVE-2026-64167, CVE-2026-64168, CVE-2026-64169, CVE-2026-64170,\nCVE-2026-64171, CVE-2026-64172, CVE-2026-64173, CVE-2026-64174,\nCVE-2026-64175, CVE-2026-64176, CVE-2026-64177, CVE-2026-64178,\nCVE-2026-64179, CVE-2026-64180, CVE-2026-64181, CVE-2026-64182,\nCVE-2026-64183, CVE-2026-64184, CVE-2026-64185, CVE-2026-64186,\nCVE-2026-64187, CVE-2026-64188, CVE-2026-64189, CVE-2026-64191,\nCVE-2026-64192, CVE-2026-64205, CVE-2026-64206, CVE-2026-64207,\nCVE-2026-64208, CVE-2026-64209, CVE-2026-64210, CVE-2026-64211,\nCVE-2026-64212, CVE-2026-64213, CVE-2026-64214, CVE-2026-64215,\nCVE-2026-64216, CVE-2026-64217, CVE-2026-64218, CVE-2026-64219,\nCVE-2026-64220, CVE-2026-64221, CVE-2026-64222, CVE-2026-64223,\nCVE-2026-64224, CVE-2026-64225, CVE-2026-64226, CVE-2026-64227,\nCVE-2026-64228, CVE-2026-64229, CVE-2026-64230, CVE-2026-64231,\nCVE-2026-64232, CVE-2026-64233, CVE-2026-64234, CVE-2026-64235,\nCVE-2026-64236, CVE-2026-64237, CVE-2026-64238, CVE-2026-64239,\nCVE-2026-64240, CVE-2026-64241, CVE-2026-64242, CVE-2026-64243,\nCVE-2026-64244, CVE-2026-64245, CVE-2026-64246, CVE-2026-64247,\nCVE-2026-64249, CVE-2026-64251, CVE-2026-64253, CVE-2026-64254,\nCVE-2026-64255, CVE-2026-64256, CVE-2026-64258, CVE-2026-64259,\nCVE-2026-64260, CVE-2026-64261, CVE-2026-64262, CVE-2026-64263,\nCVE-2026-64264, CVE-2026-64265, CVE-2026-64266, CVE-2026-64267,\nCVE-2026-64268, CVE-2026-64269, CVE-2026-64270, CVE-2026-64271,\nCVE-2026-64272, CVE-2026-64273, CVE-2026-64274, CVE-2026-64275,\nCVE-2026-64276, CVE-2026-64277, CVE-2026-64278, CVE-2026-64279,\nCVE-2026-64280, CVE-2026-64282, CVE-2026-64283, CVE-2026-64284,\nCVE-2026-64285, CVE-2026-64286, CVE-2026-64287, CVE-2026-64288,\nCVE-2026-64289, CVE-2026-64290, CVE-2026-64291, CVE-2026-64292,\nCVE-2026-64293, CVE-2026-64294, CVE-2026-64295, CVE-2026-64296,\nCVE-2026-64297, CVE-2026-64298, CVE-2026-64299, CVE-2026-64300,\nCVE-2026-64301, CVE-2026-64302, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64305, CVE-2026-64306, CVE-2026-64307, CVE-2026-64308,\nCVE-2026-64309, CVE-2026-64310, CVE-2026-64312, CVE-2026-64313,\nCVE-2026-64314, CVE-2026-64315, CVE-2026-64316, CVE-2026-64317,\nCVE-2026-64318, CVE-2026-64319, CVE-2026-64320, CVE-2026-64321,\nCVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64325,\nCVE-2026-64326, CVE-2026-64327, CVE-2026-64328, CVE-2026-64329,\nCVE-2026-64330, CVE-2026-64331, CVE-2026-64332, CVE-2026-64333,\nCVE-2026-64334, CVE-2026-64335, CVE-2026-64336, CVE-2026-64337,\nCVE-2026-64338, CVE-2026-64339, CVE-2026-64340, CVE-2026-64341,\nCVE-2026-64342, CVE-2026-64343, CVE-2026-64344, CVE-2026-64345,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64348, CVE-2026-64350,\nCVE-2026-64351, CVE-2026-64352, CVE-2026-64353, CVE-2026-64354,\nCVE-2026-64355, CVE-2026-64356, CVE-2026-64357, CVE-2026-64358,\nCVE-2026-64359, CVE-2026-64360, CVE-2026-64361, CVE-2026-64362,\nCVE-2026-64363, CVE-2026-64364, CVE-2026-64365, CVE-2026-64366,\nCVE-2026-64367, CVE-2026-64368, CVE-2026-64369, CVE-2026-64370,\nCVE-2026-64371, CVE-2026-64372, CVE-2026-64373, CVE-2026-64374,\nCVE-2026-64375, CVE-2026-64376, CVE-2026-64377, CVE-2026-64378,\nCVE-2026-64379, CVE-2026-64380, CVE-2026-64381, CVE-2026-64382,\nCVE-2026-64383, CVE-2026-64384, CVE-2026-64385, CVE-2026-64386,\nCVE-2026-64387, CVE-2026-64388, CVE-2026-64389, CVE-2026-64390,\nCVE-2026-64391, CVE-2026-64392, CVE-2026-64393, CVE-2026-64394,\nCVE-2026-64395, CVE-2026-64396, CVE-2026-64397, CVE-2026-64398,\nCVE-2026-64399, CVE-2026-64400, CVE-2026-64401, CVE-2026-64402,\nCVE-2026-64403, CVE-2026-64404, CVE-2026-64405, CVE-2026-64407,\nCVE-2026-64408, CVE-2026-64409, CVE-2026-64410, CVE-2026-64411,\nCVE-2026-64412, CVE-2026-64413, CVE-2026-64414, CVE-2026-64415,\nCVE-2026-64416, CVE-2026-64417, CVE-2026-64418, CVE-2026-64419,\nCVE-2026-64420, CVE-2026-64421, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64424, CVE-2026-64425, CVE-2026-64426, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64433,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64439,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64447,\nCVE-2026-64448, CVE-2026-64449, CVE-2026-64450, CVE-2026-64451,\nCVE-2026-64452, CVE-2026-64453, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64457, CVE-2026-64458, CVE-2026-64459,\nCVE-2026-64460, CVE-2026-64461, CVE-2026-64462, CVE-2026-64463,\nCVE-2026-64464, CVE-2026-64465, CVE-2026-64466, CVE-2026-64467,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64472, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475,\nCVE-2026-64476, CVE-2026-64477, CVE-2026-64478, CVE-2026-64479,\nCVE-2026-64480, CVE-2026-64481, CVE-2026-64482, CVE-2026-64483,\nCVE-2026-64484, CVE-2026-64485, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64490, CVE-2026-64491,\nCVE-2026-64492, CVE-2026-64493, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64499, CVE-2026-64500,\nCVE-2026-64501, CVE-2026-64502, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64507, CVE-2026-64508, CVE-2026-64509,\nCVE-2026-64510, CVE-2026-64511, CVE-2026-64512, CVE-2026-64513,\nCVE-2026-64514, CVE-2026-64515, CVE-2026-64516, CVE-2026-64517,\nCVE-2026-64518, CVE-2026-64519, CVE-2026-64520, CVE-2026-64521,\nCVE-2026-64522, CVE-2026-64523, CVE-2026-64524, CVE-2026-64525,\nCVE-2026-64526, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64531, CVE-2026-64536, CVE-2026-64556, CVE-2026-64588,\nCVE-2026-64589, CVE-2026-64590, CVE-2026-64591, CVE-2026-64592,\nCVE-2026-64593, CVE-2026-64594, CVE-2026-64596, CVE-2026-64597,\nCVE-2026-64598, CVE-2026-64599, CVE-2026-64600, CVE-2026-64601,\nCVE-2026-64602, CVE-2026-64603, CVE-2026-64604, CVE-2026-68084,\nCVE-2026-68087, CVE-2026-68088, CVE-2026-68089, CVE-2026-68090,\nCVE-2026-68091, CVE-2026-68092, CVE-2026-68459, CVE-2026-68460,\nCVE-2026-68461, CVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-07T09:05:21Z","modified":"2026-11-09T12:47:15.688648154Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8728-2","title":"linux-azure-7.0 vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - x86 platform drivers;\n  - ARM64 architecture;\n  - Cryptographic API;\n  - PSP security protocol;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Auxiliary display drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Hardware random number generator core;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - EFI core;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - FWCTL subsystem;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - NVIDIA Tegra memory controller driver;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Chrome hardware platform drivers;\n  - ACPI WMI driver;\n  - Generic PM domains;\n  - MediaTek PM domains;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - Power supply drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - MPAM driver;\n  - Amlogic Meson reset controller drivers;\n  - RPMSG subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - NVIDIA Tegra Control Backbone (CBB) driver;\n  - SPI subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Userspace I/O drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM AMD SEV Guest driver;\n  - Virtio drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - File systems infrastructure;\n  - AFS file system;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - HugeTLB file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Proc file system;\n  - Diskquota system;\n  - SMB network file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - DRM TTM subsystem;\n  - Key management;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Memory management;\n  - Tracing infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Freescale ENETC Ethernet drivers;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Linked list library;\n  - Mellanox drivers;\n  - Netfilter;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Networking core;\n  - Network shaper API;\n  - Network sockets;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - DMA mapping infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - IRQ subsystem;\n  - Kexec HandOver (KHO);\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Scatterlist API;\n  - KProbes tracing;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 802.1Q VLAN protocol;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Ceph Core library;\n  - Devlink API;\n  - Distributed Switch Architecture;\n  - Ethtool driver;\n  - Handshake API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IUCV driver;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Integrity Measurement Architecture(IMA) framework;\n  - SELinux security module;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - AudioScience HPI driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - FourSemi audio codecs;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - Simple audio multiplexer codec driver;\n  - Wolfson Microelectronics audio codecs;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-43490, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43498, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45837, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-46104, CVE-2026-46105, CVE-2026-46106, CVE-2026-46107,\nCVE-2026-46108, CVE-2026-46109, CVE-2026-46110, CVE-2026-46111,\nCVE-2026-46112, CVE-2026-46113, CVE-2026-46114, CVE-2026-46115,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46118, CVE-2026-46119,\nCVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123,\nCVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127,\nCVE-2026-46128, CVE-2026-46129, CVE-2026-46130, CVE-2026-46131,\nCVE-2026-46132, CVE-2026-46133, CVE-2026-46134, CVE-2026-46135,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46140, CVE-2026-46141, CVE-2026-46142, CVE-2026-46143,\nCVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46148,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46153, CVE-2026-46154, CVE-2026-46155, CVE-2026-46156,\nCVE-2026-46157, CVE-2026-46158, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46162, CVE-2026-46163, CVE-2026-46164,\nCVE-2026-46165, CVE-2026-46166, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46170, CVE-2026-46171, CVE-2026-46172,\nCVE-2026-46173, CVE-2026-46174, CVE-2026-46175, CVE-2026-46176,\nCVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180,\nCVE-2026-46181, CVE-2026-46182, CVE-2026-46183, CVE-2026-46184,\nCVE-2026-46185, CVE-2026-46186, CVE-2026-46187, CVE-2026-46188,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46192,\nCVE-2026-46193, CVE-2026-46195, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46202, CVE-2026-46203, CVE-2026-46204, CVE-2026-46205,\nCVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209,\nCVE-2026-46210, CVE-2026-46211, CVE-2026-46212, CVE-2026-46213,\nCVE-2026-46214, CVE-2026-46215, CVE-2026-46216, CVE-2026-46218,\nCVE-2026-46219, CVE-2026-46220, CVE-2026-46221, CVE-2026-46222,\nCVE-2026-46223, CVE-2026-46224, CVE-2026-46225, CVE-2026-46226,\nCVE-2026-46227, CVE-2026-46228, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46239,\nCVE-2026-46240, CVE-2026-46241, CVE-2026-46242, CVE-2026-46243,\nCVE-2026-46244, CVE-2026-46273, CVE-2026-46274, CVE-2026-46275,\nCVE-2026-46289, CVE-2026-46290, CVE-2026-46291, CVE-2026-46292,\nCVE-2026-46293, CVE-2026-46294, CVE-2026-46295, CVE-2026-46296,\nCVE-2026-46297, CVE-2026-46298, CVE-2026-46299, CVE-2026-46301,\nCVE-2026-46302, CVE-2026-46303, CVE-2026-46304, CVE-2026-46305,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46308, CVE-2026-46309,\nCVE-2026-46310, CVE-2026-46311, CVE-2026-46312, CVE-2026-46313,\nCVE-2026-46314, CVE-2026-46315, CVE-2026-46316, CVE-2026-46317,\nCVE-2026-46318, CVE-2026-46319, CVE-2026-46320, CVE-2026-46321,\nCVE-2026-46322, CVE-2026-46324, CVE-2026-46331, CVE-2026-52908,\nCVE-2026-52909, CVE-2026-52910, CVE-2026-52911, CVE-2026-52912,\nCVE-2026-52913, CVE-2026-52914, CVE-2026-52915, CVE-2026-52916,\nCVE-2026-52917, CVE-2026-52918, CVE-2026-52919, CVE-2026-52920,\nCVE-2026-52921, CVE-2026-52922, CVE-2026-52923, CVE-2026-52924,\nCVE-2026-52925, CVE-2026-52926, CVE-2026-52927, CVE-2026-52928,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52931, CVE-2026-52932,\nCVE-2026-52934, CVE-2026-52935, CVE-2026-52936, CVE-2026-52937,\nCVE-2026-52938, CVE-2026-52939, CVE-2026-52940, CVE-2026-52941,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52944, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-52949, CVE-2026-52950, CVE-2026-52951,\nCVE-2026-52952, CVE-2026-52953, CVE-2026-52954, CVE-2026-52955,\nCVE-2026-52956, CVE-2026-52957, CVE-2026-52958, CVE-2026-52959,\nCVE-2026-52960, CVE-2026-52961, CVE-2026-52962, CVE-2026-52963,\nCVE-2026-52964, CVE-2026-52965, CVE-2026-52967, CVE-2026-52968,\nCVE-2026-52969, CVE-2026-52970, CVE-2026-52971, CVE-2026-52973,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52976, CVE-2026-52977,\nCVE-2026-52978, CVE-2026-52979, CVE-2026-52980, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52983, CVE-2026-52984, CVE-2026-52985,\nCVE-2026-52986, CVE-2026-52987, CVE-2026-52988, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52991, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52994, CVE-2026-52995, CVE-2026-52996, CVE-2026-52997,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53000, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53005,\nCVE-2026-53006, CVE-2026-53007, CVE-2026-53008, CVE-2026-53009,\nCVE-2026-53010, CVE-2026-53011, CVE-2026-53012, CVE-2026-53013,\nCVE-2026-53014, CVE-2026-53015, CVE-2026-53016, CVE-2026-53017,\nCVE-2026-53018, CVE-2026-53019, CVE-2026-53020, CVE-2026-53021,\nCVE-2026-53022, CVE-2026-53023, CVE-2026-53024, CVE-2026-53025,\nCVE-2026-53026, CVE-2026-53027, CVE-2026-53028, CVE-2026-53029,\nCVE-2026-53030, CVE-2026-53031, CVE-2026-53032, CVE-2026-53033,\nCVE-2026-53034, CVE-2026-53035, CVE-2026-53036, CVE-2026-53037,\nCVE-2026-53038, CVE-2026-53039, CVE-2026-53040, CVE-2026-53041,\nCVE-2026-53042, CVE-2026-53043, CVE-2026-53044, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53051, CVE-2026-53052, CVE-2026-53053,\nCVE-2026-53054, CVE-2026-53055, CVE-2026-53056, CVE-2026-53057,\nCVE-2026-53058, CVE-2026-53059, CVE-2026-53060, CVE-2026-53061,\nCVE-2026-53062, CVE-2026-53063, CVE-2026-53064, CVE-2026-53065,\nCVE-2026-53066, CVE-2026-53067, CVE-2026-53068, CVE-2026-53069,\nCVE-2026-53070, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53078, CVE-2026-53079, CVE-2026-53080, CVE-2026-53081,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53087, CVE-2026-53088, CVE-2026-53089,\nCVE-2026-53090, CVE-2026-53091, CVE-2026-53092, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53095, CVE-2026-53096, CVE-2026-53097,\nCVE-2026-53098, CVE-2026-53099, CVE-2026-53100, CVE-2026-53101,\nCVE-2026-53102, CVE-2026-53103, CVE-2026-53104, CVE-2026-53105,\nCVE-2026-53106, CVE-2026-53107, CVE-2026-53108, CVE-2026-53109,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53113,\nCVE-2026-53114, CVE-2026-53115, CVE-2026-53116, CVE-2026-53117,\nCVE-2026-53118, CVE-2026-53119, CVE-2026-53120, CVE-2026-53121,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53124, CVE-2026-53125,\nCVE-2026-53126, CVE-2026-53127, CVE-2026-53128, CVE-2026-53129,\nCVE-2026-53130, CVE-2026-53131, CVE-2026-53132, CVE-2026-53133,\nCVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53139, CVE-2026-53140, CVE-2026-53141,\nCVE-2026-53142, CVE-2026-53143, CVE-2026-53144, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53151, CVE-2026-53152, CVE-2026-53153, CVE-2026-53154,\nCVE-2026-53155, CVE-2026-53156, CVE-2026-53157, CVE-2026-53158,\nCVE-2026-53159, CVE-2026-53160, CVE-2026-53161, CVE-2026-53162,\nCVE-2026-53163, CVE-2026-53164, CVE-2026-53165, CVE-2026-53167,\nCVE-2026-53168, CVE-2026-53169, CVE-2026-53170, CVE-2026-53171,\nCVE-2026-53172, CVE-2026-53173, CVE-2026-53174, CVE-2026-53175,\nCVE-2026-53176, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53186, CVE-2026-53187,\nCVE-2026-53188, CVE-2026-53189, CVE-2026-53190, CVE-2026-53191,\nCVE-2026-53192, CVE-2026-53193, CVE-2026-53194, CVE-2026-53195,\nCVE-2026-53196, CVE-2026-53197, CVE-2026-53198, CVE-2026-53199,\nCVE-2026-53200, CVE-2026-53201, CVE-2026-53202, CVE-2026-53203,\nCVE-2026-53204, CVE-2026-53205, CVE-2026-53206, CVE-2026-53207,\nCVE-2026-53208, CVE-2026-53209, CVE-2026-53210, CVE-2026-53211,\nCVE-2026-53212, CVE-2026-53213, CVE-2026-53214, CVE-2026-53215,\nCVE-2026-53216, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53221, CVE-2026-53222, CVE-2026-53223,\nCVE-2026-53224, CVE-2026-53225, CVE-2026-53226, CVE-2026-53227,\nCVE-2026-53228, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53244,\nCVE-2026-53245, CVE-2026-53246, CVE-2026-53247, CVE-2026-53248,\nCVE-2026-53249, CVE-2026-53250, CVE-2026-53251, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53257, CVE-2026-53258, CVE-2026-53259, CVE-2026-53260,\nCVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264,\nCVE-2026-53266, CVE-2026-53267, CVE-2026-53268, CVE-2026-53269,\nCVE-2026-53270, CVE-2026-53271, CVE-2026-53272, CVE-2026-53273,\nCVE-2026-53274, CVE-2026-53275, CVE-2026-53276, CVE-2026-53277,\nCVE-2026-53278, CVE-2026-53279, CVE-2026-53280, CVE-2026-53281,\nCVE-2026-53282, CVE-2026-53283, CVE-2026-53284, CVE-2026-53285,\nCVE-2026-53286, CVE-2026-53287, CVE-2026-53288, CVE-2026-53289,\nCVE-2026-53290, CVE-2026-53291, CVE-2026-53292, CVE-2026-53293,\nCVE-2026-53294, CVE-2026-53295, CVE-2026-53296, CVE-2026-53297,\nCVE-2026-53298, CVE-2026-53299, CVE-2026-53300, CVE-2026-53301,\nCVE-2026-53302, CVE-2026-53303, CVE-2026-53304, CVE-2026-53305,\nCVE-2026-53306, CVE-2026-53307, CVE-2026-53308, CVE-2026-53309,\nCVE-2026-53310, CVE-2026-53311, CVE-2026-53312, CVE-2026-53313,\nCVE-2026-53314, CVE-2026-53315, CVE-2026-53316, CVE-2026-53317,\nCVE-2026-53318, CVE-2026-53319, CVE-2026-53320, CVE-2026-53321,\nCVE-2026-53322, CVE-2026-53323, CVE-2026-53324, CVE-2026-53325,\nCVE-2026-53326, CVE-2026-53327, CVE-2026-53328, CVE-2026-53329,\nCVE-2026-53330, CVE-2026-53331, CVE-2026-53332, CVE-2026-53333,\nCVE-2026-53334, CVE-2026-53335, CVE-2026-53336, CVE-2026-53337,\nCVE-2026-53338, CVE-2026-53339, CVE-2026-53340, CVE-2026-53341,\nCVE-2026-53342, CVE-2026-53343, CVE-2026-53344, CVE-2026-53345,\nCVE-2026-53346, CVE-2026-53347, CVE-2026-53348, CVE-2026-53349,\nCVE-2026-53350, CVE-2026-53351, CVE-2026-53352, CVE-2026-53353,\nCVE-2026-53354, CVE-2026-53355, CVE-2026-53356, CVE-2026-53357,\nCVE-2026-53358, CVE-2026-53359, CVE-2026-53360, CVE-2026-53361,\nCVE-2026-53362, CVE-2026-53363, CVE-2026-53364, CVE-2026-53365,\nCVE-2026-53366, CVE-2026-53367, CVE-2026-53368, CVE-2026-53369,\nCVE-2026-53370, CVE-2026-53371, CVE-2026-53372, CVE-2026-53373,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53377,\nCVE-2026-53378, CVE-2026-53379, CVE-2026-53380, CVE-2026-53381,\nCVE-2026-53382, CVE-2026-53383, CVE-2026-53384, CVE-2026-53385,\nCVE-2026-53386, CVE-2026-53387, CVE-2026-53388, CVE-2026-53389,\nCVE-2026-53390, CVE-2026-53391, CVE-2026-53392, CVE-2026-53393,\nCVE-2026-53394, CVE-2026-53395, CVE-2026-53396, CVE-2026-53397,\nCVE-2026-53398, CVE-2026-53399, CVE-2026-53400, CVE-2026-53401,\nCVE-2026-53402, CVE-2026-53403, CVE-2026-63794, CVE-2026-63795,\nCVE-2026-63796, CVE-2026-63797, CVE-2026-63798, CVE-2026-63799,\nCVE-2026-63800, CVE-2026-63801, CVE-2026-63802, CVE-2026-63803,\nCVE-2026-63804, CVE-2026-63805, CVE-2026-63806, CVE-2026-63807,\nCVE-2026-63808, CVE-2026-63809, CVE-2026-63810, CVE-2026-63811,\nCVE-2026-63813, CVE-2026-63814, CVE-2026-63815, CVE-2026-63816,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63819, CVE-2026-63820,\nCVE-2026-63821, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63825, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63832,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63837, CVE-2026-63838, CVE-2026-63839, CVE-2026-63840,\nCVE-2026-63841, CVE-2026-63842, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63849, CVE-2026-63850, CVE-2026-63851, CVE-2026-63852,\nCVE-2026-63853, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63857, CVE-2026-63858, CVE-2026-63859, CVE-2026-63860,\nCVE-2026-63861, CVE-2026-63862, CVE-2026-63863, CVE-2026-63864,\nCVE-2026-63865, CVE-2026-63866, CVE-2026-63867, CVE-2026-63868,\nCVE-2026-63869, CVE-2026-63870, CVE-2026-63871, CVE-2026-63873,\nCVE-2026-63874, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877,\nCVE-2026-63878, CVE-2026-63879, CVE-2026-63880, CVE-2026-63881,\nCVE-2026-63882, CVE-2026-63883, CVE-2026-63884, CVE-2026-63886,\nCVE-2026-63887, CVE-2026-63888, CVE-2026-63889, CVE-2026-63890,\nCVE-2026-63891, CVE-2026-63892, CVE-2026-63893, CVE-2026-63894,\nCVE-2026-63895, CVE-2026-63896, CVE-2026-63897, CVE-2026-63898,\nCVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,\nCVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63906,\nCVE-2026-63907, CVE-2026-63908, CVE-2026-63909, CVE-2026-63910,\nCVE-2026-63911, CVE-2026-63912, CVE-2026-63913, CVE-2026-63914,\nCVE-2026-63915, CVE-2026-63916, CVE-2026-63917, CVE-2026-63918,\nCVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63922,\nCVE-2026-63923, CVE-2026-63924, CVE-2026-63925, CVE-2026-63926,\nCVE-2026-63927, CVE-2026-63928, CVE-2026-63929, CVE-2026-63930,\nCVE-2026-63931, CVE-2026-63932, CVE-2026-63933, CVE-2026-63934,\nCVE-2026-63935, CVE-2026-63936, CVE-2026-63937, CVE-2026-63938,\nCVE-2026-63939, CVE-2026-63940, CVE-2026-63941, CVE-2026-63942,\nCVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946,\nCVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63950,\nCVE-2026-63951, CVE-2026-63952, CVE-2026-63953, CVE-2026-63954,\nCVE-2026-63955, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958,\nCVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63962,\nCVE-2026-63963, CVE-2026-63964, CVE-2026-63965, CVE-2026-63966,\nCVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63970,\nCVE-2026-63971, CVE-2026-63972, CVE-2026-63973, CVE-2026-63974,\nCVE-2026-63975, CVE-2026-63976, CVE-2026-63977, CVE-2026-63978,\nCVE-2026-63979, CVE-2026-63980, CVE-2026-63981, CVE-2026-63982,\nCVE-2026-63983, CVE-2026-63984, CVE-2026-63985, CVE-2026-63986,\nCVE-2026-63987, CVE-2026-63988, CVE-2026-63989, CVE-2026-63990,\nCVE-2026-63991, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994,\nCVE-2026-63995, CVE-2026-63996, CVE-2026-63997, CVE-2026-63998,\nCVE-2026-63999, CVE-2026-64000, CVE-2026-64001, CVE-2026-64002,\nCVE-2026-64003, CVE-2026-64004, CVE-2026-64005, CVE-2026-64006,\nCVE-2026-64007, CVE-2026-64008, CVE-2026-64009, CVE-2026-64010,\nCVE-2026-64011, CVE-2026-64012, CVE-2026-64013, CVE-2026-64014,\nCVE-2026-64015, CVE-2026-64017, CVE-2026-64018, CVE-2026-64019,\nCVE-2026-64020, CVE-2026-64021, CVE-2026-64022, CVE-2026-64023,\nCVE-2026-64024, CVE-2026-64025, CVE-2026-64026, CVE-2026-64027,\nCVE-2026-64029, CVE-2026-64030, CVE-2026-64031, CVE-2026-64032,\nCVE-2026-64033, CVE-2026-64034, CVE-2026-64035, CVE-2026-64036,\nCVE-2026-64037, CVE-2026-64038, CVE-2026-64039, CVE-2026-64040,\nCVE-2026-64041, CVE-2026-64042, CVE-2026-64043, CVE-2026-64044,\nCVE-2026-64045, CVE-2026-64046, CVE-2026-64047, CVE-2026-64048,\nCVE-2026-64049, CVE-2026-64050, CVE-2026-64051, CVE-2026-64052,\nCVE-2026-64053, CVE-2026-64054, CVE-2026-64055, CVE-2026-64056,\nCVE-2026-64057, CVE-2026-64058, CVE-2026-64059, CVE-2026-64060,\nCVE-2026-64061, CVE-2026-64062, CVE-2026-64063, CVE-2026-64064,\nCVE-2026-64065, CVE-2026-64066, CVE-2026-64067, CVE-2026-64068,\nCVE-2026-64069, CVE-2026-64070, CVE-2026-64071, CVE-2026-64072,\nCVE-2026-64073, CVE-2026-64074, CVE-2026-64075, CVE-2026-64076,\nCVE-2026-64077, CVE-2026-64078, CVE-2026-64079, CVE-2026-64080,\nCVE-2026-64081, CVE-2026-64082, CVE-2026-64083, CVE-2026-64084,\nCVE-2026-64085, CVE-2026-64086, CVE-2026-64087, CVE-2026-64088,\nCVE-2026-64089, CVE-2026-64090, CVE-2026-64091, CVE-2026-64093,\nCVE-2026-64094, CVE-2026-64095, CVE-2026-64096, CVE-2026-64097,\nCVE-2026-64098, CVE-2026-64099, CVE-2026-64100, CVE-2026-64101,\nCVE-2026-64102, CVE-2026-64103, CVE-2026-64104, CVE-2026-64105,\nCVE-2026-64106, CVE-2026-64107, CVE-2026-64108, CVE-2026-64109,\nCVE-2026-64110, CVE-2026-64111, CVE-2026-64112, CVE-2026-64113,\nCVE-2026-64114, CVE-2026-64115, CVE-2026-64116, CVE-2026-64117,\nCVE-2026-64118, CVE-2026-64119, CVE-2026-64120, CVE-2026-64121,\nCVE-2026-64122, CVE-2026-64123, CVE-2026-64124, CVE-2026-64125,\nCVE-2026-64126, CVE-2026-64127, CVE-2026-64128, CVE-2026-64129,\nCVE-2026-64130, CVE-2026-64131, CVE-2026-64132, CVE-2026-64133,\nCVE-2026-64134, CVE-2026-64135, CVE-2026-64136, CVE-2026-64137,\nCVE-2026-64138, CVE-2026-64139, CVE-2026-64140, CVE-2026-64141,\nCVE-2026-64142, CVE-2026-64143, CVE-2026-64144, CVE-2026-64145,\nCVE-2026-64146, CVE-2026-64147, CVE-2026-64148, CVE-2026-64149,\nCVE-2026-64150, CVE-2026-64151, CVE-2026-64152, CVE-2026-64153,\nCVE-2026-64154, CVE-2026-64155, CVE-2026-64156, CVE-2026-64157,\nCVE-2026-64159, CVE-2026-64160, CVE-2026-64161, CVE-2026-64162,\nCVE-2026-64163, CVE-2026-64164, CVE-2026-64165, CVE-2026-64166,\nCVE-2026-64167, CVE-2026-64168, CVE-2026-64169, CVE-2026-64170,\nCVE-2026-64171, CVE-2026-64172, CVE-2026-64173, CVE-2026-64174,\nCVE-2026-64175, CVE-2026-64176, CVE-2026-64177, CVE-2026-64178,\nCVE-2026-64179, CVE-2026-64180, CVE-2026-64181, CVE-2026-64182,\nCVE-2026-64183, CVE-2026-64184, CVE-2026-64185, CVE-2026-64186,\nCVE-2026-64187, CVE-2026-64188, CVE-2026-64189, CVE-2026-64191,\nCVE-2026-64192, CVE-2026-64205, CVE-2026-64206, CVE-2026-64207,\nCVE-2026-64208, CVE-2026-64209, CVE-2026-64210, CVE-2026-64211,\nCVE-2026-64212, CVE-2026-64213, CVE-2026-64214, CVE-2026-64215,\nCVE-2026-64216, CVE-2026-64217, CVE-2026-64218, CVE-2026-64219,\nCVE-2026-64220, CVE-2026-64221, CVE-2026-64222, CVE-2026-64223,\nCVE-2026-64224, CVE-2026-64225, CVE-2026-64226, CVE-2026-64227,\nCVE-2026-64228, CVE-2026-64229, CVE-2026-64230, CVE-2026-64231,\nCVE-2026-64232, CVE-2026-64233, CVE-2026-64234, CVE-2026-64235,\nCVE-2026-64236, CVE-2026-64237, CVE-2026-64238, CVE-2026-64239,\nCVE-2026-64240, CVE-2026-64241, CVE-2026-64242, CVE-2026-64243,\nCVE-2026-64244, CVE-2026-64245, CVE-2026-64246, CVE-2026-64247,\nCVE-2026-64249, CVE-2026-64251, CVE-2026-64253, CVE-2026-64254,\nCVE-2026-64255, CVE-2026-64256, CVE-2026-64258, CVE-2026-64259,\nCVE-2026-64260, CVE-2026-64261, CVE-2026-64262, CVE-2026-64263,\nCVE-2026-64264, CVE-2026-64265, CVE-2026-64266, CVE-2026-64267,\nCVE-2026-64268, CVE-2026-64269, CVE-2026-64270, CVE-2026-64271,\nCVE-2026-64272, CVE-2026-64273, CVE-2026-64274, CVE-2026-64275,\nCVE-2026-64276, CVE-2026-64277, CVE-2026-64278, CVE-2026-64279,\nCVE-2026-64280, CVE-2026-64282, CVE-2026-64283, CVE-2026-64284,\nCVE-2026-64285, CVE-2026-64286, CVE-2026-64287, CVE-2026-64288,\nCVE-2026-64289, CVE-2026-64290, CVE-2026-64291, CVE-2026-64292,\nCVE-2026-64293, CVE-2026-64294, CVE-2026-64295, CVE-2026-64296,\nCVE-2026-64297, CVE-2026-64298, CVE-2026-64299, CVE-2026-64300,\nCVE-2026-64301, CVE-2026-64302, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64305, CVE-2026-64306, CVE-2026-64307, CVE-2026-64308,\nCVE-2026-64309, CVE-2026-64310, CVE-2026-64312, CVE-2026-64313,\nCVE-2026-64314, CVE-2026-64315, CVE-2026-64316, CVE-2026-64317,\nCVE-2026-64318, CVE-2026-64319, CVE-2026-64320, CVE-2026-64321,\nCVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64325,\nCVE-2026-64326, CVE-2026-64327, CVE-2026-64328, CVE-2026-64329,\nCVE-2026-64330, CVE-2026-64331, CVE-2026-64332, CVE-2026-64333,\nCVE-2026-64334, CVE-2026-64335, CVE-2026-64336, CVE-2026-64337,\nCVE-2026-64338, CVE-2026-64339, CVE-2026-64340, CVE-2026-64341,\nCVE-2026-64342, CVE-2026-64343, CVE-2026-64344, CVE-2026-64345,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64348, CVE-2026-64350,\nCVE-2026-64351, CVE-2026-64352, CVE-2026-64353, CVE-2026-64354,\nCVE-2026-64355, CVE-2026-64356, CVE-2026-64357, CVE-2026-64358,\nCVE-2026-64359, CVE-2026-64360, CVE-2026-64361, CVE-2026-64362,\nCVE-2026-64363, CVE-2026-64364, CVE-2026-64365, CVE-2026-64366,\nCVE-2026-64367, CVE-2026-64368, CVE-2026-64369, CVE-2026-64370,\nCVE-2026-64371, CVE-2026-64372, CVE-2026-64373, CVE-2026-64374,\nCVE-2026-64375, CVE-2026-64376, CVE-2026-64377, CVE-2026-64378,\nCVE-2026-64379, CVE-2026-64380, CVE-2026-64381, CVE-2026-64382,\nCVE-2026-64383, CVE-2026-64384, CVE-2026-64385, CVE-2026-64386,\nCVE-2026-64387, CVE-2026-64388, CVE-2026-64389, CVE-2026-64390,\nCVE-2026-64391, CVE-2026-64392, CVE-2026-64393, CVE-2026-64394,\nCVE-2026-64395, CVE-2026-64396, CVE-2026-64397, CVE-2026-64398,\nCVE-2026-64399, CVE-2026-64400, CVE-2026-64401, CVE-2026-64402,\nCVE-2026-64403, CVE-2026-64404, CVE-2026-64405, CVE-2026-64407,\nCVE-2026-64408, CVE-2026-64409, CVE-2026-64410, CVE-2026-64411,\nCVE-2026-64412, CVE-2026-64413, CVE-2026-64414, CVE-2026-64415,\nCVE-2026-64416, CVE-2026-64417, CVE-2026-64418, CVE-2026-64419,\nCVE-2026-64420, CVE-2026-64421, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64424, CVE-2026-64425, CVE-2026-64426, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64433,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64439,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64447,\nCVE-2026-64448, CVE-2026-64449, CVE-2026-64450, CVE-2026-64451,\nCVE-2026-64452, CVE-2026-64453, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64457, CVE-2026-64458, CVE-2026-64459,\nCVE-2026-64460, CVE-2026-64461, CVE-2026-64462, CVE-2026-64463,\nCVE-2026-64464, CVE-2026-64465, CVE-2026-64466, CVE-2026-64467,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64472, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475,\nCVE-2026-64476, CVE-2026-64477, CVE-2026-64478, CVE-2026-64479,\nCVE-2026-64480, CVE-2026-64481, CVE-2026-64482, CVE-2026-64483,\nCVE-2026-64484, CVE-2026-64485, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64490, CVE-2026-64491,\nCVE-2026-64492, CVE-2026-64493, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64499, CVE-2026-64500,\nCVE-2026-64501, CVE-2026-64502, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64507, CVE-2026-64508, CVE-2026-64509,\nCVE-2026-64510, CVE-2026-64511, CVE-2026-64512, CVE-2026-64513,\nCVE-2026-64514, CVE-2026-64515, CVE-2026-64516, CVE-2026-64517,\nCVE-2026-64518, CVE-2026-64519, CVE-2026-64520, CVE-2026-64521,\nCVE-2026-64522, CVE-2026-64523, CVE-2026-64524, CVE-2026-64525,\nCVE-2026-64526, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64531, CVE-2026-64536, CVE-2026-64556, CVE-2026-64588,\nCVE-2026-64589, CVE-2026-64590, CVE-2026-64591, CVE-2026-64592,\nCVE-2026-64593, CVE-2026-64594, CVE-2026-64596, CVE-2026-64597,\nCVE-2026-64598, CVE-2026-64599, CVE-2026-64600, CVE-2026-64601,\nCVE-2026-64602, CVE-2026-64603, CVE-2026-64604, CVE-2026-68084,\nCVE-2026-68087, CVE-2026-68088, CVE-2026-68089, CVE-2026-68090,\nCVE-2026-68091, CVE-2026-68092, CVE-2026-68459, CVE-2026-68460,\nCVE-2026-68461, CVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-22T13:19:49Z","modified":"2026-11-09T12:47:58.942440642Z","updated_at":"2026-11-07T01:57:06.567161Z"},{"id":"USN-8728-3","title":"linux-oracle-7.0 vulnerabilities","description":"It was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nIt was discovered that some AMD Zen 2 processors did not properly isolate\nshared resources in the operation cache. A local attacker could possibly\nuse this issue to corrupt instructions executed at a higher privilege\nlevel, resulting in privilege escalation. (CVE-2025-54518)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - x86 platform drivers;\n  - ARM64 architecture;\n  - Cryptographic API;\n  - PSP security protocol;\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Auxiliary display drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - Character device driver;\n  - Hardware random number generator core;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - EFI core;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - FWCTL subsystem;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - NVIDIA Tegra memory controller driver;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Chrome hardware platform drivers;\n  - ACPI WMI driver;\n  - Generic PM domains;\n  - MediaTek PM domains;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - Power supply drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - MPAM driver;\n  - Amlogic Meson reset controller drivers;\n  - RPMSG subsystem;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - NVIDIA Tegra Control Backbone (CBB) driver;\n  - SPI subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Userspace I/O drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - TSM AMD SEV Guest driver;\n  - Virtio drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - File systems infrastructure;\n  - AFS file system;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - HugeTLB file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Proc file system;\n  - Diskquota system;\n  - SMB network file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - DRM TTM subsystem;\n  - Key management;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Memory management;\n  - Tracing infrastructure;\n  - QorIQ DPAA2 FSL-MC bus driver;\n  - Freescale ENETC Ethernet drivers;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Linked list library;\n  - Mellanox drivers;\n  - Netfilter;\n  - padata parallel execution mechanism;\n  - PPP protocol drivers and compressors;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Networking core;\n  - Network shaper API;\n  - Network sockets;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - DMA mapping infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - IRQ subsystem;\n  - Kexec HandOver (KHO);\n  - Locking primitives;\n  - Kernel module support;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Scatterlist API;\n  - KProbes tracing;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 802.1Q VLAN protocol;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Ceph Core library;\n  - Devlink API;\n  - Distributed Switch Architecture;\n  - Ethtool driver;\n  - Handshake API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IUCV driver;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Integrity Measurement Architecture(IMA) framework;\n  - SELinux security module;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - AudioScience HPI driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - FourSemi audio codecs;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - Simple audio multiplexer codec driver;\n  - Wolfson Microelectronics audio codecs;\n  - QCOM ASoC drivers;\n  - Renesas ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SOF drivers;\n  - STI ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-43490, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496,\nCVE-2026-43497, CVE-2026-43498, CVE-2026-43502, CVE-2026-45834,\nCVE-2026-45835, CVE-2026-45836, CVE-2026-45837, CVE-2026-45838,\nCVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842,\nCVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846,\nCVE-2026-46104, CVE-2026-46105, CVE-2026-46106, CVE-2026-46107,\nCVE-2026-46108, CVE-2026-46109, CVE-2026-46110, CVE-2026-46111,\nCVE-2026-46112, CVE-2026-46113, CVE-2026-46114, CVE-2026-46115,\nCVE-2026-46116, CVE-2026-46117, CVE-2026-46118, CVE-2026-46119,\nCVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123,\nCVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127,\nCVE-2026-46128, CVE-2026-46129, CVE-2026-46130, CVE-2026-46131,\nCVE-2026-46132, CVE-2026-46133, CVE-2026-46134, CVE-2026-46135,\nCVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139,\nCVE-2026-46140, CVE-2026-46141, CVE-2026-46142, CVE-2026-46143,\nCVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46148,\nCVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152,\nCVE-2026-46153, CVE-2026-46154, CVE-2026-46155, CVE-2026-46156,\nCVE-2026-46157, CVE-2026-46158, CVE-2026-46159, CVE-2026-46160,\nCVE-2026-46161, CVE-2026-46162, CVE-2026-46163, CVE-2026-46164,\nCVE-2026-46165, CVE-2026-46166, CVE-2026-46167, CVE-2026-46168,\nCVE-2026-46169, CVE-2026-46170, CVE-2026-46171, CVE-2026-46172,\nCVE-2026-46173, CVE-2026-46174, CVE-2026-46175, CVE-2026-46176,\nCVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180,\nCVE-2026-46181, CVE-2026-46182, CVE-2026-46183, CVE-2026-46184,\nCVE-2026-46185, CVE-2026-46186, CVE-2026-46187, CVE-2026-46188,\nCVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46192,\nCVE-2026-46193, CVE-2026-46195, CVE-2026-46196, CVE-2026-46197,\nCVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201,\nCVE-2026-46202, CVE-2026-46203, CVE-2026-46204, CVE-2026-46205,\nCVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209,\nCVE-2026-46210, CVE-2026-46211, CVE-2026-46212, CVE-2026-46213,\nCVE-2026-46214, CVE-2026-46215, CVE-2026-46216, CVE-2026-46218,\nCVE-2026-46219, CVE-2026-46220, CVE-2026-46221, CVE-2026-46222,\nCVE-2026-46223, CVE-2026-46224, CVE-2026-46225, CVE-2026-46226,\nCVE-2026-46227, CVE-2026-46228, CVE-2026-46229, CVE-2026-46230,\nCVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234,\nCVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46239,\nCVE-2026-46240, CVE-2026-46241, CVE-2026-46242, CVE-2026-46243,\nCVE-2026-46244, CVE-2026-46273, CVE-2026-46274, CVE-2026-46275,\nCVE-2026-46289, CVE-2026-46290, CVE-2026-46291, CVE-2026-46292,\nCVE-2026-46293, CVE-2026-46294, CVE-2026-46295, CVE-2026-46296,\nCVE-2026-46297, CVE-2026-46298, CVE-2026-46299, CVE-2026-46301,\nCVE-2026-46302, CVE-2026-46303, CVE-2026-46304, CVE-2026-46305,\nCVE-2026-46306, CVE-2026-46307, CVE-2026-46308, CVE-2026-46309,\nCVE-2026-46310, CVE-2026-46311, CVE-2026-46312, CVE-2026-46313,\nCVE-2026-46314, CVE-2026-46315, CVE-2026-46316, CVE-2026-46317,\nCVE-2026-46318, CVE-2026-46319, CVE-2026-46320, CVE-2026-46321,\nCVE-2026-46322, CVE-2026-46324, CVE-2026-46331, CVE-2026-52908,\nCVE-2026-52909, CVE-2026-52910, CVE-2026-52911, CVE-2026-52912,\nCVE-2026-52913, CVE-2026-52914, CVE-2026-52915, CVE-2026-52916,\nCVE-2026-52917, CVE-2026-52918, CVE-2026-52919, CVE-2026-52920,\nCVE-2026-52921, CVE-2026-52922, CVE-2026-52923, CVE-2026-52924,\nCVE-2026-52925, CVE-2026-52926, CVE-2026-52927, CVE-2026-52928,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52931, CVE-2026-52932,\nCVE-2026-52934, CVE-2026-52935, CVE-2026-52936, CVE-2026-52937,\nCVE-2026-52938, CVE-2026-52939, CVE-2026-52940, CVE-2026-52941,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52944, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-52949, CVE-2026-52950, CVE-2026-52951,\nCVE-2026-52952, CVE-2026-52953, CVE-2026-52954, CVE-2026-52955,\nCVE-2026-52956, CVE-2026-52957, CVE-2026-52958, CVE-2026-52959,\nCVE-2026-52960, CVE-2026-52961, CVE-2026-52962, CVE-2026-52963,\nCVE-2026-52964, CVE-2026-52965, CVE-2026-52967, CVE-2026-52968,\nCVE-2026-52969, CVE-2026-52970, CVE-2026-52971, CVE-2026-52973,\nCVE-2026-52974, CVE-2026-52975, CVE-2026-52976, CVE-2026-52977,\nCVE-2026-52978, CVE-2026-52979, CVE-2026-52980, CVE-2026-52981,\nCVE-2026-52982, CVE-2026-52983, CVE-2026-52984, CVE-2026-52985,\nCVE-2026-52986, CVE-2026-52987, CVE-2026-52988, CVE-2026-52989,\nCVE-2026-52990, CVE-2026-52991, CVE-2026-52992, CVE-2026-52993,\nCVE-2026-52994, CVE-2026-52995, CVE-2026-52996, CVE-2026-52997,\nCVE-2026-52998, CVE-2026-52999, CVE-2026-53000, CVE-2026-53001,\nCVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53005,\nCVE-2026-53006, CVE-2026-53007, CVE-2026-53008, CVE-2026-53009,\nCVE-2026-53010, CVE-2026-53011, CVE-2026-53012, CVE-2026-53013,\nCVE-2026-53014, CVE-2026-53015, CVE-2026-53016, CVE-2026-53017,\nCVE-2026-53018, CVE-2026-53019, CVE-2026-53020, CVE-2026-53021,\nCVE-2026-53022, CVE-2026-53023, CVE-2026-53024, CVE-2026-53025,\nCVE-2026-53026, CVE-2026-53027, CVE-2026-53028, CVE-2026-53029,\nCVE-2026-53030, CVE-2026-53031, CVE-2026-53032, CVE-2026-53033,\nCVE-2026-53034, CVE-2026-53035, CVE-2026-53036, CVE-2026-53037,\nCVE-2026-53038, CVE-2026-53039, CVE-2026-53040, CVE-2026-53041,\nCVE-2026-53042, CVE-2026-53043, CVE-2026-53044, CVE-2026-53045,\nCVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,\nCVE-2026-53050, CVE-2026-53051, CVE-2026-53052, CVE-2026-53053,\nCVE-2026-53054, CVE-2026-53055, CVE-2026-53056, CVE-2026-53057,\nCVE-2026-53058, CVE-2026-53059, CVE-2026-53060, CVE-2026-53061,\nCVE-2026-53062, CVE-2026-53063, CVE-2026-53064, CVE-2026-53065,\nCVE-2026-53066, CVE-2026-53067, CVE-2026-53068, CVE-2026-53069,\nCVE-2026-53070, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,\nCVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077,\nCVE-2026-53078, CVE-2026-53079, CVE-2026-53080, CVE-2026-53081,\nCVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085,\nCVE-2026-53086, CVE-2026-53087, CVE-2026-53088, CVE-2026-53089,\nCVE-2026-53090, CVE-2026-53091, CVE-2026-53092, CVE-2026-53093,\nCVE-2026-53094, CVE-2026-53095, CVE-2026-53096, CVE-2026-53097,\nCVE-2026-53098, CVE-2026-53099, CVE-2026-53100, CVE-2026-53101,\nCVE-2026-53102, CVE-2026-53103, CVE-2026-53104, CVE-2026-53105,\nCVE-2026-53106, CVE-2026-53107, CVE-2026-53108, CVE-2026-53109,\nCVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53113,\nCVE-2026-53114, CVE-2026-53115, CVE-2026-53116, CVE-2026-53117,\nCVE-2026-53118, CVE-2026-53119, CVE-2026-53120, CVE-2026-53121,\nCVE-2026-53122, CVE-2026-53123, CVE-2026-53124, CVE-2026-53125,\nCVE-2026-53126, CVE-2026-53127, CVE-2026-53128, CVE-2026-53129,\nCVE-2026-53130, CVE-2026-53131, CVE-2026-53132, CVE-2026-53133,\nCVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53139, CVE-2026-53140, CVE-2026-53141,\nCVE-2026-53142, CVE-2026-53143, CVE-2026-53144, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53151, CVE-2026-53152, CVE-2026-53153, CVE-2026-53154,\nCVE-2026-53155, CVE-2026-53156, CVE-2026-53157, CVE-2026-53158,\nCVE-2026-53159, CVE-2026-53160, CVE-2026-53161, CVE-2026-53162,\nCVE-2026-53163, CVE-2026-53164, CVE-2026-53165, CVE-2026-53167,\nCVE-2026-53168, CVE-2026-53169, CVE-2026-53170, CVE-2026-53171,\nCVE-2026-53172, CVE-2026-53173, CVE-2026-53174, CVE-2026-53175,\nCVE-2026-53176, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53186, CVE-2026-53187,\nCVE-2026-53188, CVE-2026-53189, CVE-2026-53190, CVE-2026-53191,\nCVE-2026-53192, CVE-2026-53193, CVE-2026-53194, CVE-2026-53195,\nCVE-2026-53196, CVE-2026-53197, CVE-2026-53198, CVE-2026-53199,\nCVE-2026-53200, CVE-2026-53201, CVE-2026-53202, CVE-2026-53203,\nCVE-2026-53204, CVE-2026-53205, CVE-2026-53206, CVE-2026-53207,\nCVE-2026-53208, CVE-2026-53209, CVE-2026-53210, CVE-2026-53211,\nCVE-2026-53212, CVE-2026-53213, CVE-2026-53214, CVE-2026-53215,\nCVE-2026-53216, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53221, CVE-2026-53222, CVE-2026-53223,\nCVE-2026-53224, CVE-2026-53225, CVE-2026-53226, CVE-2026-53227,\nCVE-2026-53228, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53244,\nCVE-2026-53245, CVE-2026-53246, CVE-2026-53247, CVE-2026-53248,\nCVE-2026-53249, CVE-2026-53250, CVE-2026-53251, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53257, CVE-2026-53258, CVE-2026-53259, CVE-2026-53260,\nCVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264,\nCVE-2026-53266, CVE-2026-53267, CVE-2026-53268, CVE-2026-53269,\nCVE-2026-53270, CVE-2026-53271, CVE-2026-53272, CVE-2026-53273,\nCVE-2026-53274, CVE-2026-53275, CVE-2026-53276, CVE-2026-53277,\nCVE-2026-53278, CVE-2026-53279, CVE-2026-53280, CVE-2026-53281,\nCVE-2026-53282, CVE-2026-53283, CVE-2026-53284, CVE-2026-53285,\nCVE-2026-53286, CVE-2026-53287, CVE-2026-53288, CVE-2026-53289,\nCVE-2026-53290, CVE-2026-53291, CVE-2026-53292, CVE-2026-53293,\nCVE-2026-53294, CVE-2026-53295, CVE-2026-53296, CVE-2026-53297,\nCVE-2026-53298, CVE-2026-53299, CVE-2026-53300, CVE-2026-53301,\nCVE-2026-53302, CVE-2026-53303, CVE-2026-53304, CVE-2026-53305,\nCVE-2026-53306, CVE-2026-53307, CVE-2026-53308, CVE-2026-53309,\nCVE-2026-53310, CVE-2026-53311, CVE-2026-53312, CVE-2026-53313,\nCVE-2026-53314, CVE-2026-53315, CVE-2026-53316, CVE-2026-53317,\nCVE-2026-53318, CVE-2026-53319, CVE-2026-53320, CVE-2026-53321,\nCVE-2026-53322, CVE-2026-53323, CVE-2026-53324, CVE-2026-53325,\nCVE-2026-53326, CVE-2026-53327, CVE-2026-53328, CVE-2026-53329,\nCVE-2026-53330, CVE-2026-53331, CVE-2026-53332, CVE-2026-53333,\nCVE-2026-53334, CVE-2026-53335, CVE-2026-53336, CVE-2026-53337,\nCVE-2026-53338, CVE-2026-53339, CVE-2026-53340, CVE-2026-53341,\nCVE-2026-53342, CVE-2026-53343, CVE-2026-53344, CVE-2026-53345,\nCVE-2026-53346, CVE-2026-53347, CVE-2026-53348, CVE-2026-53349,\nCVE-2026-53350, CVE-2026-53351, CVE-2026-53352, CVE-2026-53353,\nCVE-2026-53354, CVE-2026-53355, CVE-2026-53356, CVE-2026-53357,\nCVE-2026-53358, CVE-2026-53359, CVE-2026-53360, CVE-2026-53361,\nCVE-2026-53362, CVE-2026-53363, CVE-2026-53364, CVE-2026-53365,\nCVE-2026-53366, CVE-2026-53367, CVE-2026-53368, CVE-2026-53369,\nCVE-2026-53370, CVE-2026-53371, CVE-2026-53372, CVE-2026-53373,\nCVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53377,\nCVE-2026-53378, CVE-2026-53379, CVE-2026-53380, CVE-2026-53381,\nCVE-2026-53382, CVE-2026-53383, CVE-2026-53384, CVE-2026-53385,\nCVE-2026-53386, CVE-2026-53387, CVE-2026-53388, CVE-2026-53389,\nCVE-2026-53390, CVE-2026-53391, CVE-2026-53392, CVE-2026-53393,\nCVE-2026-53394, CVE-2026-53395, CVE-2026-53396, CVE-2026-53397,\nCVE-2026-53398, CVE-2026-53399, CVE-2026-53400, CVE-2026-53401,\nCVE-2026-53402, CVE-2026-53403, CVE-2026-63794, CVE-2026-63795,\nCVE-2026-63796, CVE-2026-63797, CVE-2026-63798, CVE-2026-63799,\nCVE-2026-63800, CVE-2026-63801, CVE-2026-63802, CVE-2026-63803,\nCVE-2026-63804, CVE-2026-63805, CVE-2026-63806, CVE-2026-63807,\nCVE-2026-63808, CVE-2026-63809, CVE-2026-63810, CVE-2026-63811,\nCVE-2026-63813, CVE-2026-63814, CVE-2026-63815, CVE-2026-63816,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63819, CVE-2026-63820,\nCVE-2026-63821, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63825, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63832,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63837, CVE-2026-63838, CVE-2026-63839, CVE-2026-63840,\nCVE-2026-63841, CVE-2026-63842, CVE-2026-63843, CVE-2026-63844,\nCVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848,\nCVE-2026-63849, CVE-2026-63850, CVE-2026-63851, CVE-2026-63852,\nCVE-2026-63853, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856,\nCVE-2026-63857, CVE-2026-63858, CVE-2026-63859, CVE-2026-63860,\nCVE-2026-63861, CVE-2026-63862, CVE-2026-63863, CVE-2026-63864,\nCVE-2026-63865, CVE-2026-63866, CVE-2026-63867, CVE-2026-63868,\nCVE-2026-63869, CVE-2026-63870, CVE-2026-63871, CVE-2026-63873,\nCVE-2026-63874, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877,\nCVE-2026-63878, CVE-2026-63879, CVE-2026-63880, CVE-2026-63881,\nCVE-2026-63882, CVE-2026-63883, CVE-2026-63884, CVE-2026-63886,\nCVE-2026-63887, CVE-2026-63888, CVE-2026-63889, CVE-2026-63890,\nCVE-2026-63891, CVE-2026-63892, CVE-2026-63893, CVE-2026-63894,\nCVE-2026-63895, CVE-2026-63896, CVE-2026-63897, CVE-2026-63898,\nCVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,\nCVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63906,\nCVE-2026-63907, CVE-2026-63908, CVE-2026-63909, CVE-2026-63910,\nCVE-2026-63911, CVE-2026-63912, CVE-2026-63913, CVE-2026-63914,\nCVE-2026-63915, CVE-2026-63916, CVE-2026-63917, CVE-2026-63918,\nCVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63922,\nCVE-2026-63923, CVE-2026-63924, CVE-2026-63925, CVE-2026-63926,\nCVE-2026-63927, CVE-2026-63928, CVE-2026-63929, CVE-2026-63930,\nCVE-2026-63931, CVE-2026-63932, CVE-2026-63933, CVE-2026-63934,\nCVE-2026-63935, CVE-2026-63936, CVE-2026-63937, CVE-2026-63938,\nCVE-2026-63939, CVE-2026-63940, CVE-2026-63941, CVE-2026-63942,\nCVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946,\nCVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63950,\nCVE-2026-63951, CVE-2026-63952, CVE-2026-63953, CVE-2026-63954,\nCVE-2026-63955, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958,\nCVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63962,\nCVE-2026-63963, CVE-2026-63964, CVE-2026-63965, CVE-2026-63966,\nCVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63970,\nCVE-2026-63971, CVE-2026-63972, CVE-2026-63973, CVE-2026-63974,\nCVE-2026-63975, CVE-2026-63976, CVE-2026-63977, CVE-2026-63978,\nCVE-2026-63979, CVE-2026-63980, CVE-2026-63981, CVE-2026-63982,\nCVE-2026-63983, CVE-2026-63984, CVE-2026-63985, CVE-2026-63986,\nCVE-2026-63987, CVE-2026-63988, CVE-2026-63989, CVE-2026-63990,\nCVE-2026-63991, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994,\nCVE-2026-63995, CVE-2026-63996, CVE-2026-63997, CVE-2026-63998,\nCVE-2026-63999, CVE-2026-64000, CVE-2026-64001, CVE-2026-64002,\nCVE-2026-64003, CVE-2026-64004, CVE-2026-64005, CVE-2026-64006,\nCVE-2026-64007, CVE-2026-64008, CVE-2026-64009, CVE-2026-64010,\nCVE-2026-64011, CVE-2026-64012, CVE-2026-64013, CVE-2026-64014,\nCVE-2026-64015, CVE-2026-64017, CVE-2026-64018, CVE-2026-64019,\nCVE-2026-64020, CVE-2026-64021, CVE-2026-64022, CVE-2026-64023,\nCVE-2026-64024, CVE-2026-64025, CVE-2026-64026, CVE-2026-64027,\nCVE-2026-64029, CVE-2026-64030, CVE-2026-64031, CVE-2026-64032,\nCVE-2026-64033, CVE-2026-64034, CVE-2026-64035, CVE-2026-64036,\nCVE-2026-64037, CVE-2026-64038, CVE-2026-64039, CVE-2026-64040,\nCVE-2026-64041, CVE-2026-64042, CVE-2026-64043, CVE-2026-64044,\nCVE-2026-64045, CVE-2026-64046, CVE-2026-64047, CVE-2026-64048,\nCVE-2026-64049, CVE-2026-64050, CVE-2026-64051, CVE-2026-64052,\nCVE-2026-64053, CVE-2026-64054, CVE-2026-64055, CVE-2026-64056,\nCVE-2026-64057, CVE-2026-64058, CVE-2026-64059, CVE-2026-64060,\nCVE-2026-64061, CVE-2026-64062, CVE-2026-64063, CVE-2026-64064,\nCVE-2026-64065, CVE-2026-64066, CVE-2026-64067, CVE-2026-64068,\nCVE-2026-64069, CVE-2026-64070, CVE-2026-64071, CVE-2026-64072,\nCVE-2026-64073, CVE-2026-64074, CVE-2026-64075, CVE-2026-64076,\nCVE-2026-64077, CVE-2026-64078, CVE-2026-64079, CVE-2026-64080,\nCVE-2026-64081, CVE-2026-64082, CVE-2026-64083, CVE-2026-64084,\nCVE-2026-64085, CVE-2026-64086, CVE-2026-64087, CVE-2026-64088,\nCVE-2026-64089, CVE-2026-64090, CVE-2026-64091, CVE-2026-64093,\nCVE-2026-64094, CVE-2026-64095, CVE-2026-64096, CVE-2026-64097,\nCVE-2026-64098, CVE-2026-64099, CVE-2026-64100, CVE-2026-64101,\nCVE-2026-64102, CVE-2026-64103, CVE-2026-64104, CVE-2026-64105,\nCVE-2026-64106, CVE-2026-64107, CVE-2026-64108, CVE-2026-64109,\nCVE-2026-64110, CVE-2026-64111, CVE-2026-64112, CVE-2026-64113,\nCVE-2026-64114, CVE-2026-64115, CVE-2026-64116, CVE-2026-64117,\nCVE-2026-64118, CVE-2026-64119, CVE-2026-64120, CVE-2026-64121,\nCVE-2026-64122, CVE-2026-64123, CVE-2026-64124, CVE-2026-64125,\nCVE-2026-64126, CVE-2026-64127, CVE-2026-64128, CVE-2026-64129,\nCVE-2026-64130, CVE-2026-64131, CVE-2026-64132, CVE-2026-64133,\nCVE-2026-64134, CVE-2026-64135, CVE-2026-64136, CVE-2026-64137,\nCVE-2026-64138, CVE-2026-64139, CVE-2026-64140, CVE-2026-64141,\nCVE-2026-64142, CVE-2026-64143, CVE-2026-64144, CVE-2026-64145,\nCVE-2026-64146, CVE-2026-64147, CVE-2026-64148, CVE-2026-64149,\nCVE-2026-64150, CVE-2026-64151, CVE-2026-64152, CVE-2026-64153,\nCVE-2026-64154, CVE-2026-64155, CVE-2026-64156, CVE-2026-64157,\nCVE-2026-64159, CVE-2026-64160, CVE-2026-64161, CVE-2026-64162,\nCVE-2026-64163, CVE-2026-64164, CVE-2026-64165, CVE-2026-64166,\nCVE-2026-64167, CVE-2026-64168, CVE-2026-64169, CVE-2026-64170,\nCVE-2026-64171, CVE-2026-64172, CVE-2026-64173, CVE-2026-64174,\nCVE-2026-64175, CVE-2026-64176, CVE-2026-64177, CVE-2026-64178,\nCVE-2026-64179, CVE-2026-64180, CVE-2026-64181, CVE-2026-64182,\nCVE-2026-64183, CVE-2026-64184, CVE-2026-64185, CVE-2026-64186,\nCVE-2026-64187, CVE-2026-64188, CVE-2026-64189, CVE-2026-64191,\nCVE-2026-64192, CVE-2026-64205, CVE-2026-64206, CVE-2026-64207,\nCVE-2026-64208, CVE-2026-64209, CVE-2026-64210, CVE-2026-64211,\nCVE-2026-64212, CVE-2026-64213, CVE-2026-64214, CVE-2026-64215,\nCVE-2026-64216, CVE-2026-64217, CVE-2026-64218, CVE-2026-64219,\nCVE-2026-64220, CVE-2026-64221, CVE-2026-64222, CVE-2026-64223,\nCVE-2026-64224, CVE-2026-64225, CVE-2026-64226, CVE-2026-64227,\nCVE-2026-64228, CVE-2026-64229, CVE-2026-64230, CVE-2026-64231,\nCVE-2026-64232, CVE-2026-64233, CVE-2026-64234, CVE-2026-64235,\nCVE-2026-64236, CVE-2026-64237, CVE-2026-64238, CVE-2026-64239,\nCVE-2026-64240, CVE-2026-64241, CVE-2026-64242, CVE-2026-64243,\nCVE-2026-64244, CVE-2026-64245, CVE-2026-64246, CVE-2026-64247,\nCVE-2026-64249, CVE-2026-64251, CVE-2026-64253, CVE-2026-64254,\nCVE-2026-64255, CVE-2026-64256, CVE-2026-64258, CVE-2026-64259,\nCVE-2026-64260, CVE-2026-64261, CVE-2026-64262, CVE-2026-64263,\nCVE-2026-64264, CVE-2026-64265, CVE-2026-64266, CVE-2026-64267,\nCVE-2026-64268, CVE-2026-64269, CVE-2026-64270, CVE-2026-64271,\nCVE-2026-64272, CVE-2026-64273, CVE-2026-64274, CVE-2026-64275,\nCVE-2026-64276, CVE-2026-64277, CVE-2026-64278, CVE-2026-64279,\nCVE-2026-64280, CVE-2026-64282, CVE-2026-64283, CVE-2026-64284,\nCVE-2026-64285, CVE-2026-64286, CVE-2026-64287, CVE-2026-64288,\nCVE-2026-64289, CVE-2026-64290, CVE-2026-64291, CVE-2026-64292,\nCVE-2026-64293, CVE-2026-64294, CVE-2026-64295, CVE-2026-64296,\nCVE-2026-64297, CVE-2026-64298, CVE-2026-64299, CVE-2026-64300,\nCVE-2026-64301, CVE-2026-64302, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64305, CVE-2026-64306, CVE-2026-64307, CVE-2026-64308,\nCVE-2026-64309, CVE-2026-64310, CVE-2026-64312, CVE-2026-64313,\nCVE-2026-64314, CVE-2026-64315, CVE-2026-64316, CVE-2026-64317,\nCVE-2026-64318, CVE-2026-64319, CVE-2026-64320, CVE-2026-64321,\nCVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64325,\nCVE-2026-64326, CVE-2026-64327, CVE-2026-64328, CVE-2026-64329,\nCVE-2026-64330, CVE-2026-64331, CVE-2026-64332, CVE-2026-64333,\nCVE-2026-64334, CVE-2026-64335, CVE-2026-64336, CVE-2026-64337,\nCVE-2026-64338, CVE-2026-64339, CVE-2026-64340, CVE-2026-64341,\nCVE-2026-64342, CVE-2026-64343, CVE-2026-64344, CVE-2026-64345,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64348, CVE-2026-64350,\nCVE-2026-64351, CVE-2026-64352, CVE-2026-64353, CVE-2026-64354,\nCVE-2026-64355, CVE-2026-64356, CVE-2026-64357, CVE-2026-64358,\nCVE-2026-64359, CVE-2026-64360, CVE-2026-64361, CVE-2026-64362,\nCVE-2026-64363, CVE-2026-64364, CVE-2026-64365, CVE-2026-64366,\nCVE-2026-64367, CVE-2026-64368, CVE-2026-64369, CVE-2026-64370,\nCVE-2026-64371, CVE-2026-64372, CVE-2026-64373, CVE-2026-64374,\nCVE-2026-64375, CVE-2026-64376, CVE-2026-64377, CVE-2026-64378,\nCVE-2026-64379, CVE-2026-64380, CVE-2026-64381, CVE-2026-64382,\nCVE-2026-64383, CVE-2026-64384, CVE-2026-64385, CVE-2026-64386,\nCVE-2026-64387, CVE-2026-64388, CVE-2026-64389, CVE-2026-64390,\nCVE-2026-64391, CVE-2026-64392, CVE-2026-64393, CVE-2026-64394,\nCVE-2026-64395, CVE-2026-64396, CVE-2026-64397, CVE-2026-64398,\nCVE-2026-64399, CVE-2026-64400, CVE-2026-64401, CVE-2026-64402,\nCVE-2026-64403, CVE-2026-64404, CVE-2026-64405, CVE-2026-64407,\nCVE-2026-64408, CVE-2026-64409, CVE-2026-64410, CVE-2026-64411,\nCVE-2026-64412, CVE-2026-64413, CVE-2026-64414, CVE-2026-64415,\nCVE-2026-64416, CVE-2026-64417, CVE-2026-64418, CVE-2026-64419,\nCVE-2026-64420, CVE-2026-64421, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64424, CVE-2026-64425, CVE-2026-64426, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64433,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64439,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64447,\nCVE-2026-64448, CVE-2026-64449, CVE-2026-64450, CVE-2026-64451,\nCVE-2026-64452, CVE-2026-64453, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64457, CVE-2026-64458, CVE-2026-64459,\nCVE-2026-64460, CVE-2026-64461, CVE-2026-64462, CVE-2026-64463,\nCVE-2026-64464, CVE-2026-64465, CVE-2026-64466, CVE-2026-64467,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64472, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475,\nCVE-2026-64476, CVE-2026-64477, CVE-2026-64478, CVE-2026-64479,\nCVE-2026-64480, CVE-2026-64481, CVE-2026-64482, CVE-2026-64483,\nCVE-2026-64484, CVE-2026-64485, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64490, CVE-2026-64491,\nCVE-2026-64492, CVE-2026-64493, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64499, CVE-2026-64500,\nCVE-2026-64501, CVE-2026-64502, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64507, CVE-2026-64508, CVE-2026-64509,\nCVE-2026-64510, CVE-2026-64511, CVE-2026-64512, CVE-2026-64513,\nCVE-2026-64514, CVE-2026-64515, CVE-2026-64516, CVE-2026-64517,\nCVE-2026-64518, CVE-2026-64519, CVE-2026-64520, CVE-2026-64521,\nCVE-2026-64522, CVE-2026-64523, CVE-2026-64524, CVE-2026-64525,\nCVE-2026-64526, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64531, CVE-2026-64536, CVE-2026-64556, CVE-2026-64588,\nCVE-2026-64589, CVE-2026-64590, CVE-2026-64591, CVE-2026-64592,\nCVE-2026-64593, CVE-2026-64594, CVE-2026-64596, CVE-2026-64597,\nCVE-2026-64598, CVE-2026-64599, CVE-2026-64600, CVE-2026-64601,\nCVE-2026-64602, CVE-2026-64603, CVE-2026-64604, CVE-2026-68084,\nCVE-2026-68087, CVE-2026-68088, CVE-2026-68089, CVE-2026-68090,\nCVE-2026-68091, CVE-2026-68092, CVE-2026-68459, CVE-2026-68460,\nCVE-2026-68461, CVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-29T07:53:08Z","modified":"2026-11-09T12:46:55.620011336Z","updated_at":"2026-11-07T01:56:47.245871Z"},{"id":"USN-8760-1","title":"linux-nvidia-7.0 vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53152, CVE-2026-53153, CVE-2026-53154, CVE-2026-53155,\nCVE-2026-53156, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53160, CVE-2026-53161, CVE-2026-53162, CVE-2026-53163,\nCVE-2026-53164, CVE-2026-53165, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53169, CVE-2026-53170, CVE-2026-53171, CVE-2026-53172,\nCVE-2026-53173, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53187, CVE-2026-53188,\nCVE-2026-53189, CVE-2026-53190, CVE-2026-53191, CVE-2026-53192,\nCVE-2026-53193, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,\nCVE-2026-53197, CVE-2026-53198, CVE-2026-53199, CVE-2026-53200,\nCVE-2026-53201, CVE-2026-53202, CVE-2026-53203, CVE-2026-53204,\nCVE-2026-53205, CVE-2026-53206, CVE-2026-53207, CVE-2026-53208,\nCVE-2026-53209, CVE-2026-53210, CVE-2026-53211, CVE-2026-53213,\nCVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53222, CVE-2026-53223, CVE-2026-53226,\nCVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53243,\nCVE-2026-53244, CVE-2026-53245, CVE-2026-53248, CVE-2026-53249,\nCVE-2026-53250, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53257,\nCVE-2026-53258, CVE-2026-53259, CVE-2026-53261, CVE-2026-53262,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270,\nCVE-2026-53271, CVE-2026-53272, CVE-2026-53273, CVE-2026-53274,\nCVE-2026-53275, CVE-2026-53276, CVE-2026-53325, CVE-2026-53326,\nCVE-2026-53327, CVE-2026-53328, CVE-2026-53329, CVE-2026-53330,\nCVE-2026-53331, CVE-2026-53332, CVE-2026-53333, CVE-2026-53334,\nCVE-2026-53335, CVE-2026-53336, CVE-2026-53337, CVE-2026-53338,\nCVE-2026-53339, CVE-2026-53340, CVE-2026-53341, CVE-2026-53342,\nCVE-2026-53343, CVE-2026-53344, CVE-2026-53345, CVE-2026-53346,\nCVE-2026-53347, CVE-2026-53348, CVE-2026-53349, CVE-2026-53350,\nCVE-2026-53351, CVE-2026-53352, CVE-2026-53353, CVE-2026-53355,\nCVE-2026-53356, CVE-2026-53361, CVE-2026-53362, CVE-2026-53363,\nCVE-2026-53366, CVE-2026-53381, CVE-2026-53382, CVE-2026-53383,\nCVE-2026-53384, CVE-2026-53385, CVE-2026-53386, CVE-2026-53387,\nCVE-2026-53388, CVE-2026-53389, CVE-2026-53390, CVE-2026-53391,\nCVE-2026-53392, CVE-2026-53393, CVE-2026-53394, CVE-2026-53395,\nCVE-2026-53396, CVE-2026-53397, CVE-2026-53398, CVE-2026-53399,\nCVE-2026-53400, CVE-2026-53401, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63795, CVE-2026-63796, CVE-2026-63797,\nCVE-2026-63798, CVE-2026-63799, CVE-2026-63800, CVE-2026-63801,\nCVE-2026-63802, CVE-2026-63803, CVE-2026-63804, CVE-2026-63805,\nCVE-2026-63806, CVE-2026-63807, CVE-2026-63808, CVE-2026-63809,\nCVE-2026-63810, CVE-2026-63811, CVE-2026-63812, CVE-2026-63813,\nCVE-2026-63814, CVE-2026-63815, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63819, CVE-2026-63820, CVE-2026-63821,\nCVE-2026-63822, CVE-2026-63823, CVE-2026-63824, CVE-2026-63825,\nCVE-2026-63826, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829,\nCVE-2026-63830, CVE-2026-63831, CVE-2026-63832, CVE-2026-63833,\nCVE-2026-63834, CVE-2026-63835, CVE-2026-63836, CVE-2026-63867,\nCVE-2026-63868, CVE-2026-63869, CVE-2026-63870, CVE-2026-63871,\nCVE-2026-63873, CVE-2026-63874, CVE-2026-64187, CVE-2026-64188,\nCVE-2026-64189, CVE-2026-64191, CVE-2026-64192, CVE-2026-64205,\nCVE-2026-64206, CVE-2026-64207, CVE-2026-64244, CVE-2026-64245,\nCVE-2026-64246, CVE-2026-64247, CVE-2026-64249, CVE-2026-64251,\nCVE-2026-64253, CVE-2026-64254, CVE-2026-64255, CVE-2026-64256,\nCVE-2026-64258, CVE-2026-64259, CVE-2026-64260, CVE-2026-64261,\nCVE-2026-64262, CVE-2026-64263, CVE-2026-64264, CVE-2026-64265,\nCVE-2026-64266, CVE-2026-64267, CVE-2026-64268, CVE-2026-64269,\nCVE-2026-64270, CVE-2026-64271, CVE-2026-64272, CVE-2026-64273,\nCVE-2026-64274, CVE-2026-64275, CVE-2026-64276, CVE-2026-64277,\nCVE-2026-64278, CVE-2026-64279, CVE-2026-64280, CVE-2026-64282,\nCVE-2026-64283, CVE-2026-64284, CVE-2026-64285, CVE-2026-64286,\nCVE-2026-64287, CVE-2026-64288, CVE-2026-64289, CVE-2026-64290,\nCVE-2026-64291, CVE-2026-64292, CVE-2026-64293, CVE-2026-64294,\nCVE-2026-64295, CVE-2026-64296, CVE-2026-64297, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64300, CVE-2026-64301, CVE-2026-64302,\nCVE-2026-64303, CVE-2026-64304, CVE-2026-64305, CVE-2026-64306,\nCVE-2026-64307, CVE-2026-64308, CVE-2026-64309, CVE-2026-64310,\nCVE-2026-64312, CVE-2026-64313, CVE-2026-64314, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64319,\nCVE-2026-64320, CVE-2026-64321, CVE-2026-64322, CVE-2026-64323,\nCVE-2026-64324, CVE-2026-64325, CVE-2026-64326, CVE-2026-64327,\nCVE-2026-64328, CVE-2026-64329, CVE-2026-64330, CVE-2026-64331,\nCVE-2026-64332, CVE-2026-64333, CVE-2026-64334, CVE-2026-64335,\nCVE-2026-64336, CVE-2026-64337, CVE-2026-64338, CVE-2026-64339,\nCVE-2026-64340, CVE-2026-64341, CVE-2026-64342, CVE-2026-64343,\nCVE-2026-64344, CVE-2026-64345, CVE-2026-64346, CVE-2026-64347,\nCVE-2026-64348, CVE-2026-64350, CVE-2026-64351, CVE-2026-64352,\nCVE-2026-64353, CVE-2026-64354, CVE-2026-64355, CVE-2026-64356,\nCVE-2026-64357, CVE-2026-64358, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64365, CVE-2026-64366, CVE-2026-64367, CVE-2026-64368,\nCVE-2026-64369, CVE-2026-64370, CVE-2026-64371, CVE-2026-64372,\nCVE-2026-64373, CVE-2026-64374, CVE-2026-64375, CVE-2026-64376,\nCVE-2026-64377, CVE-2026-64378, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64382, CVE-2026-64383, CVE-2026-64384,\nCVE-2026-64385, CVE-2026-64386, CVE-2026-64387, CVE-2026-64388,\nCVE-2026-64389, CVE-2026-64390, CVE-2026-64391, CVE-2026-64392,\nCVE-2026-64393, CVE-2026-64394, CVE-2026-64395, CVE-2026-64396,\nCVE-2026-64397, CVE-2026-64398, CVE-2026-64399, CVE-2026-64400,\nCVE-2026-64401, CVE-2026-64402, CVE-2026-64403, CVE-2026-64404,\nCVE-2026-64405, CVE-2026-64406, CVE-2026-64407, CVE-2026-64408,\nCVE-2026-64409, CVE-2026-64410, CVE-2026-64411, CVE-2026-64412,\nCVE-2026-64413, CVE-2026-64414, CVE-2026-64415, CVE-2026-64416,\nCVE-2026-64417, CVE-2026-64418, CVE-2026-64419, CVE-2026-64420,\nCVE-2026-64421, CVE-2026-64422, CVE-2026-64423, CVE-2026-64424,\nCVE-2026-64425, CVE-2026-64426, CVE-2026-64428, CVE-2026-64429,\nCVE-2026-64430, CVE-2026-64432, CVE-2026-64433, CVE-2026-64434,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64439,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64447,\nCVE-2026-64448, CVE-2026-64449, CVE-2026-64450, CVE-2026-64451,\nCVE-2026-64452, CVE-2026-64453, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64457, CVE-2026-64458, CVE-2026-64459,\nCVE-2026-64460, CVE-2026-64461, CVE-2026-64462, CVE-2026-64463,\nCVE-2026-64464, CVE-2026-64465, CVE-2026-64466, CVE-2026-64467,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64472, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475,\nCVE-2026-64476, CVE-2026-64477, CVE-2026-64478, CVE-2026-64479,\nCVE-2026-64480, CVE-2026-64481, CVE-2026-64482, CVE-2026-64483,\nCVE-2026-64484, CVE-2026-64485, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64490, CVE-2026-64491,\nCVE-2026-64492, CVE-2026-64493, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64499, CVE-2026-64500,\nCVE-2026-64501, CVE-2026-64502, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64507, CVE-2026-64508, CVE-2026-64509,\nCVE-2026-64510, CVE-2026-64511, CVE-2026-64512, CVE-2026-64513,\nCVE-2026-64514, CVE-2026-64529, CVE-2026-64531, CVE-2026-64536,\nCVE-2026-64556, CVE-2026-64588, CVE-2026-64589, CVE-2026-64590,\nCVE-2026-64591, CVE-2026-64592, CVE-2026-64593, CVE-2026-64594,\nCVE-2026-64596, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64601, CVE-2026-64602, CVE-2026-64603,\nCVE-2026-64604, CVE-2026-68084, CVE-2026-68085, CVE-2026-68087,\nCVE-2026-68088, CVE-2026-68089, CVE-2026-68090, CVE-2026-68091,\nCVE-2026-68092, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-15T09:15:22Z","modified":"2026-11-09T12:46:40.9164817Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8760-2","title":"linux-nvidia vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53152, CVE-2026-53153, CVE-2026-53154, CVE-2026-53155,\nCVE-2026-53156, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53160, CVE-2026-53161, CVE-2026-53162, CVE-2026-53163,\nCVE-2026-53164, CVE-2026-53165, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53169, CVE-2026-53170, CVE-2026-53171, CVE-2026-53172,\nCVE-2026-53173, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53187, CVE-2026-53188,\nCVE-2026-53189, CVE-2026-53190, CVE-2026-53191, CVE-2026-53192,\nCVE-2026-53193, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,\nCVE-2026-53197, CVE-2026-53198, CVE-2026-53199, CVE-2026-53200,\nCVE-2026-53201, CVE-2026-53202, CVE-2026-53203, CVE-2026-53204,\nCVE-2026-53205, CVE-2026-53206, CVE-2026-53207, CVE-2026-53208,\nCVE-2026-53209, CVE-2026-53210, CVE-2026-53211, CVE-2026-53213,\nCVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53222, CVE-2026-53223, CVE-2026-53226,\nCVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53243,\nCVE-2026-53244, CVE-2026-53245, CVE-2026-53248, CVE-2026-53249,\nCVE-2026-53250, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53257,\nCVE-2026-53258, CVE-2026-53259, CVE-2026-53261, CVE-2026-53262,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270,\nCVE-2026-53271, CVE-2026-53272, CVE-2026-53273, CVE-2026-53274,\nCVE-2026-53275, CVE-2026-53276, CVE-2026-53325, CVE-2026-53326,\nCVE-2026-53327, CVE-2026-53328, CVE-2026-53329, CVE-2026-53330,\nCVE-2026-53331, CVE-2026-53332, CVE-2026-53333, CVE-2026-53334,\nCVE-2026-53335, CVE-2026-53336, CVE-2026-53337, CVE-2026-53338,\nCVE-2026-53339, CVE-2026-53340, CVE-2026-53341, CVE-2026-53342,\nCVE-2026-53343, CVE-2026-53344, CVE-2026-53345, CVE-2026-53346,\nCVE-2026-53347, CVE-2026-53348, CVE-2026-53349, CVE-2026-53350,\nCVE-2026-53351, CVE-2026-53352, CVE-2026-53353, CVE-2026-53355,\nCVE-2026-53356, CVE-2026-53361, CVE-2026-53362, CVE-2026-53363,\nCVE-2026-53366, CVE-2026-53381, CVE-2026-53382, CVE-2026-53383,\nCVE-2026-53384, CVE-2026-53385, CVE-2026-53386, CVE-2026-53387,\nCVE-2026-53388, CVE-2026-53389, CVE-2026-53390, CVE-2026-53391,\nCVE-2026-53392, CVE-2026-53393, CVE-2026-53394, CVE-2026-53395,\nCVE-2026-53396, CVE-2026-53397, CVE-2026-53398, CVE-2026-53399,\nCVE-2026-53400, CVE-2026-53401, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63795, CVE-2026-63796, CVE-2026-63797,\nCVE-2026-63798, CVE-2026-63799, CVE-2026-63800, CVE-2026-63801,\nCVE-2026-63802, CVE-2026-63803, CVE-2026-63804, CVE-2026-63805,\nCVE-2026-63806, CVE-2026-63807, CVE-2026-63808, CVE-2026-63809,\nCVE-2026-63810, CVE-2026-63811, CVE-2026-63812, CVE-2026-63813,\nCVE-2026-63814, CVE-2026-63815, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63819, CVE-2026-63820, CVE-2026-63821,\nCVE-2026-63822, CVE-2026-63823, CVE-2026-63824, CVE-2026-63825,\nCVE-2026-63826, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829,\nCVE-2026-63830, CVE-2026-63831, CVE-2026-63832, CVE-2026-63833,\nCVE-2026-63834, CVE-2026-63835, CVE-2026-63836, CVE-2026-63867,\nCVE-2026-63868, CVE-2026-63869, CVE-2026-63870, CVE-2026-63871,\nCVE-2026-63873, CVE-2026-63874, CVE-2026-64187, CVE-2026-64188,\nCVE-2026-64189, CVE-2026-64191, CVE-2026-64192, CVE-2026-64205,\nCVE-2026-64206, CVE-2026-64207, CVE-2026-64244, CVE-2026-64245,\nCVE-2026-64246, CVE-2026-64247, CVE-2026-64249, CVE-2026-64251,\nCVE-2026-64253, CVE-2026-64254, CVE-2026-64255, CVE-2026-64256,\nCVE-2026-64258, CVE-2026-64259, CVE-2026-64260, CVE-2026-64261,\nCVE-2026-64262, CVE-2026-64263, CVE-2026-64264, CVE-2026-64265,\nCVE-2026-64266, CVE-2026-64267, CVE-2026-64268, CVE-2026-64269,\nCVE-2026-64270, CVE-2026-64271, CVE-2026-64272, CVE-2026-64273,\nCVE-2026-64274, CVE-2026-64275, CVE-2026-64276, CVE-2026-64277,\nCVE-2026-64278, CVE-2026-64279, CVE-2026-64280, CVE-2026-64282,\nCVE-2026-64283, CVE-2026-64284, CVE-2026-64285, CVE-2026-64286,\nCVE-2026-64287, CVE-2026-64288, CVE-2026-64289, CVE-2026-64290,\nCVE-2026-64291, CVE-2026-64292, CVE-2026-64293, CVE-2026-64294,\nCVE-2026-64295, CVE-2026-64296, CVE-2026-64297, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64300, CVE-2026-64301, CVE-2026-64302,\nCVE-2026-64303, CVE-2026-64304, CVE-2026-64305, CVE-2026-64306,\nCVE-2026-64307, CVE-2026-64308, CVE-2026-64309, CVE-2026-64310,\nCVE-2026-64312, CVE-2026-64313, CVE-2026-64314, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64319,\nCVE-2026-64320, CVE-2026-64321, CVE-2026-64322, CVE-2026-64323,\nCVE-2026-64324, CVE-2026-64325, CVE-2026-64326, CVE-2026-64327,\nCVE-2026-64328, CVE-2026-64329, CVE-2026-64330, CVE-2026-64331,\nCVE-2026-64332, CVE-2026-64333, CVE-2026-64334, CVE-2026-64335,\nCVE-2026-64336, CVE-2026-64337, CVE-2026-64338, CVE-2026-64339,\nCVE-2026-64340, CVE-2026-64341, CVE-2026-64342, CVE-2026-64343,\nCVE-2026-64344, CVE-2026-64345, CVE-2026-64346, CVE-2026-64347,\nCVE-2026-64348, CVE-2026-64350, CVE-2026-64351, CVE-2026-64352,\nCVE-2026-64353, CVE-2026-64354, CVE-2026-64355, CVE-2026-64356,\nCVE-2026-64357, CVE-2026-64358, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64365, CVE-2026-64366, CVE-2026-64367, CVE-2026-64368,\nCVE-2026-64369, CVE-2026-64370, CVE-2026-64371, CVE-2026-64372,\nCVE-2026-64373, CVE-2026-64374, CVE-2026-64375, CVE-2026-64376,\nCVE-2026-64377, CVE-2026-64378, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64382, CVE-2026-64383, CVE-2026-64384,\nCVE-2026-64385, CVE-2026-64386, CVE-2026-64387, CVE-2026-64388,\nCVE-2026-64389, CVE-2026-64390, CVE-2026-64391, CVE-2026-64392,\nCVE-2026-64393, CVE-2026-64394, CVE-2026-64395, CVE-2026-64396,\nCVE-2026-64397, CVE-2026-64398, CVE-2026-64399, CVE-2026-64400,\nCVE-2026-64401, CVE-2026-64402, CVE-2026-64403, CVE-2026-64404,\nCVE-2026-64405, CVE-2026-64406, CVE-2026-64407, CVE-2026-64408,\nCVE-2026-64409, CVE-2026-64410, CVE-2026-64411, CVE-2026-64412,\nCVE-2026-64413, CVE-2026-64414, CVE-2026-64415, CVE-2026-64416,\nCVE-2026-64417, CVE-2026-64418, CVE-2026-64419, CVE-2026-64420,\nCVE-2026-64421, CVE-2026-64422, CVE-2026-64423, CVE-2026-64424,\nCVE-2026-64425, CVE-2026-64426, CVE-2026-64428, CVE-2026-64429,\nCVE-2026-64430, CVE-2026-64432, CVE-2026-64433, CVE-2026-64434,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64439,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64447,\nCVE-2026-64448, CVE-2026-64449, CVE-2026-64450, CVE-2026-64451,\nCVE-2026-64452, CVE-2026-64453, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64457, CVE-2026-64458, CVE-2026-64459,\nCVE-2026-64460, CVE-2026-64461, CVE-2026-64462, CVE-2026-64463,\nCVE-2026-64464, CVE-2026-64465, CVE-2026-64466, CVE-2026-64467,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64472, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475,\nCVE-2026-64476, CVE-2026-64477, CVE-2026-64478, CVE-2026-64479,\nCVE-2026-64480, CVE-2026-64481, CVE-2026-64482, CVE-2026-64483,\nCVE-2026-64484, CVE-2026-64485, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64490, CVE-2026-64491,\nCVE-2026-64492, CVE-2026-64493, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64499, CVE-2026-64500,\nCVE-2026-64501, CVE-2026-64502, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64507, CVE-2026-64508, CVE-2026-64509,\nCVE-2026-64510, CVE-2026-64511, CVE-2026-64512, CVE-2026-64513,\nCVE-2026-64514, CVE-2026-64529, CVE-2026-64531, CVE-2026-64536,\nCVE-2026-64556, CVE-2026-64588, CVE-2026-64589, CVE-2026-64590,\nCVE-2026-64591, CVE-2026-64592, CVE-2026-64593, CVE-2026-64594,\nCVE-2026-64596, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64601, CVE-2026-64602, CVE-2026-64603,\nCVE-2026-64604, CVE-2026-68084, CVE-2026-68085, CVE-2026-68087,\nCVE-2026-68088, CVE-2026-68089, CVE-2026-68090, CVE-2026-68091,\nCVE-2026-68092, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591)\n","status":"published","published":"2026-09-22T11:02:06Z","modified":"2026-11-09T12:47:05.453489221Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8800-1","title":"linux-nvidia-bos vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - User-space API (UAPI);\n  - Kernel build system;\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Drivers core;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - Hardware random number generator core;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - System reset/shutdown drivers;\n  - Power sequencing drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - RPMSG subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - Intel USBIO USB I/O expander driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - BTRFS file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - File systems infrastructure;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Memory Management;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Restartable sequences system call mechanism;\n  - Socket messages infrastructure;\n  - Network traffic control;\n  - Bluetooth subsystem;\n  - Netfilter;\n  - Networking core;\n  - Network sockets;\n  - TCP network protocol;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IPv4 networking;\n  - IPv6 networking;\n  - XFRM subsystem;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SCTP protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - SoundWire (SDCA) ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917,\nCVE-2026-52929, CVE-2026-52930, CVE-2026-52935, CVE-2026-52938,\nCVE-2026-52939, CVE-2026-52940, CVE-2026-52942, CVE-2026-52947,\nCVE-2026-52948, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53140, CVE-2026-53141, CVE-2026-53142,\nCVE-2026-53143, CVE-2026-53144, CVE-2026-53145, CVE-2026-53146,\nCVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,\nCVE-2026-53152, CVE-2026-53153, CVE-2026-53154, CVE-2026-53155,\nCVE-2026-53156, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53160, CVE-2026-53161, CVE-2026-53162, CVE-2026-53163,\nCVE-2026-53164, CVE-2026-53165, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53169, CVE-2026-53170, CVE-2026-53171, CVE-2026-53172,\nCVE-2026-53173, CVE-2026-53177, CVE-2026-53178, CVE-2026-53179,\nCVE-2026-53180, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,\nCVE-2026-53184, CVE-2026-53185, CVE-2026-53187, CVE-2026-53188,\nCVE-2026-53189, CVE-2026-53190, CVE-2026-53191, CVE-2026-53192,\nCVE-2026-53193, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,\nCVE-2026-53197, CVE-2026-53198, CVE-2026-53199, CVE-2026-53200,\nCVE-2026-53201, CVE-2026-53202, CVE-2026-53203, CVE-2026-53204,\nCVE-2026-53205, CVE-2026-53206, CVE-2026-53207, CVE-2026-53208,\nCVE-2026-53209, CVE-2026-53210, CVE-2026-53211, CVE-2026-53213,\nCVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53220, CVE-2026-53222, CVE-2026-53223, CVE-2026-53226,\nCVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53231,\nCVE-2026-53232, CVE-2026-53233, CVE-2026-53234, CVE-2026-53235,\nCVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53240, CVE-2026-53241, CVE-2026-53242, CVE-2026-53243,\nCVE-2026-53244, CVE-2026-53245, CVE-2026-53248, CVE-2026-53249,\nCVE-2026-53250, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53257,\nCVE-2026-53258, CVE-2026-53259, CVE-2026-53261, CVE-2026-53262,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270,\nCVE-2026-53271, CVE-2026-53272, CVE-2026-53273, CVE-2026-53274,\nCVE-2026-53275, CVE-2026-53276, CVE-2026-53325, CVE-2026-53326,\nCVE-2026-53327, CVE-2026-53328, CVE-2026-53329, CVE-2026-53330,\nCVE-2026-53331, CVE-2026-53332, CVE-2026-53333, CVE-2026-53334,\nCVE-2026-53335, CVE-2026-53336, CVE-2026-53337, CVE-2026-53338,\nCVE-2026-53339, CVE-2026-53340, CVE-2026-53341, CVE-2026-53342,\nCVE-2026-53343, CVE-2026-53344, CVE-2026-53345, CVE-2026-53346,\nCVE-2026-53347, CVE-2026-53348, CVE-2026-53349, CVE-2026-53350,\nCVE-2026-53351, CVE-2026-53352, CVE-2026-53353, CVE-2026-53355,\nCVE-2026-53356, CVE-2026-53361, CVE-2026-53362, CVE-2026-53363,\nCVE-2026-53366, CVE-2026-53381, CVE-2026-53382, CVE-2026-53383,\nCVE-2026-53384, CVE-2026-53385, CVE-2026-53386, CVE-2026-53387,\nCVE-2026-53388, CVE-2026-53389, CVE-2026-53390, CVE-2026-53391,\nCVE-2026-53392, CVE-2026-53393, CVE-2026-53394, CVE-2026-53395,\nCVE-2026-53396, CVE-2026-53397, CVE-2026-53398, CVE-2026-53399,\nCVE-2026-53400, CVE-2026-53401, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63795, CVE-2026-63796, CVE-2026-63797,\nCVE-2026-63798, CVE-2026-63799, CVE-2026-63800, CVE-2026-63801,\nCVE-2026-63802, CVE-2026-63803, CVE-2026-63804, CVE-2026-63805,\nCVE-2026-63806, CVE-2026-63807, CVE-2026-63808, CVE-2026-63809,\nCVE-2026-63810, CVE-2026-63811, CVE-2026-63812, CVE-2026-63813,\nCVE-2026-63814, CVE-2026-63815, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63819, CVE-2026-63820, CVE-2026-63821,\nCVE-2026-63822, CVE-2026-63823, CVE-2026-63824, CVE-2026-63825,\nCVE-2026-63826, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829,\nCVE-2026-63830, CVE-2026-63831, CVE-2026-63832, CVE-2026-63833,\nCVE-2026-63834, CVE-2026-63835, CVE-2026-63836, CVE-2026-63867,\nCVE-2026-63868, CVE-2026-63869, CVE-2026-63870, CVE-2026-63871,\nCVE-2026-63873, CVE-2026-63874, CVE-2026-64187, CVE-2026-64188,\nCVE-2026-64189, CVE-2026-64191, CVE-2026-64192, CVE-2026-64205,\nCVE-2026-64206, CVE-2026-64207, CVE-2026-64244, CVE-2026-64245,\nCVE-2026-64246, CVE-2026-64247, CVE-2026-64249, CVE-2026-64251,\nCVE-2026-64253, CVE-2026-64254, CVE-2026-64255, CVE-2026-64256,\nCVE-2026-64258, CVE-2026-64259, CVE-2026-64260, CVE-2026-64261,\nCVE-2026-64262, CVE-2026-64263, CVE-2026-64264, CVE-2026-64265,\nCVE-2026-64266, CVE-2026-64267, CVE-2026-64268, CVE-2026-64269,\nCVE-2026-64270, CVE-2026-64271, CVE-2026-64272, CVE-2026-64273,\nCVE-2026-64274, CVE-2026-64275, CVE-2026-64276, CVE-2026-64277,\nCVE-2026-64278, CVE-2026-64279, CVE-2026-64280, CVE-2026-64282,\nCVE-2026-64283, CVE-2026-64284, CVE-2026-64285, CVE-2026-64286,\nCVE-2026-64287, CVE-2026-64288, CVE-2026-64289, CVE-2026-64290,\nCVE-2026-64291, CVE-2026-64292, CVE-2026-64293, CVE-2026-64294,\nCVE-2026-64295, CVE-2026-64296, CVE-2026-64297, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64300, CVE-2026-64301, CVE-2026-64302,\nCVE-2026-64303, CVE-2026-64304, CVE-2026-64305, CVE-2026-64306,\nCVE-2026-64307, CVE-2026-64308, CVE-2026-64309, CVE-2026-64310,\nCVE-2026-64312, CVE-2026-64313, CVE-2026-64314, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64319,\nCVE-2026-64320, CVE-2026-64321, CVE-2026-64322, CVE-2026-64323,\nCVE-2026-64324, CVE-2026-64325, CVE-2026-64326, CVE-2026-64327,\nCVE-2026-64328, CVE-2026-64329, CVE-2026-64330, CVE-2026-64331,\nCVE-2026-64332, CVE-2026-64333, CVE-2026-64334, CVE-2026-64335,\nCVE-2026-64336, CVE-2026-64337, CVE-2026-64338, CVE-2026-64339,\nCVE-2026-64340, CVE-2026-64341, CVE-2026-64342, CVE-2026-64343,\nCVE-2026-64344, CVE-2026-64345, CVE-2026-64346, CVE-2026-64347,\nCVE-2026-64348, CVE-2026-64350, CVE-2026-64351, CVE-2026-64352,\nCVE-2026-64353, CVE-2026-64354, CVE-2026-64355, CVE-2026-64356,\nCVE-2026-64357, CVE-2026-64358, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64365, CVE-2026-64366, CVE-2026-64367, CVE-2026-64368,\nCVE-2026-64369, CVE-2026-64370, CVE-2026-64371, CVE-2026-64372,\nCVE-2026-64373, CVE-2026-64374, CVE-2026-64375, CVE-2026-64376,\nCVE-2026-64377, CVE-2026-64378, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64382, CVE-2026-64383, CVE-2026-64384,\nCVE-2026-64385, CVE-2026-64386, CVE-2026-64387, CVE-2026-64388,\nCVE-2026-64389, CVE-2026-64390, CVE-2026-64391, CVE-2026-64392,\nCVE-2026-64393, CVE-2026-64394, CVE-2026-64395, CVE-2026-64396,\nCVE-2026-64397, CVE-2026-64398, CVE-2026-64399, CVE-2026-64400,\nCVE-2026-64401, CVE-2026-64402, CVE-2026-64403, CVE-2026-64404,\nCVE-2026-64405, CVE-2026-64406, CVE-2026-64407, CVE-2026-64408,\nCVE-2026-64409, CVE-2026-64410, CVE-2026-64411, CVE-2026-64412,\nCVE-2026-64413, CVE-2026-64414, CVE-2026-64415, CVE-2026-64416,\nCVE-2026-64417, CVE-2026-64418, CVE-2026-64419, CVE-2026-64420,\nCVE-2026-64421, CVE-2026-64422, CVE-2026-64423, CVE-2026-64424,\nCVE-2026-64425, CVE-2026-64426, CVE-2026-64428, CVE-2026-64429,\nCVE-2026-64430, CVE-2026-64432, CVE-2026-64433, CVE-2026-64434,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64439,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64447,\nCVE-2026-64448, CVE-2026-64449, CVE-2026-64450, CVE-2026-64451,\nCVE-2026-64452, CVE-2026-64453, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64457, CVE-2026-64458, CVE-2026-64459,\nCVE-2026-64460, CVE-2026-64461, CVE-2026-64462, CVE-2026-64463,\nCVE-2026-64464, CVE-2026-64465, CVE-2026-64466, CVE-2026-64467,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64472, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475,\nCVE-2026-64476, CVE-2026-64477, CVE-2026-64478, CVE-2026-64479,\nCVE-2026-64480, CVE-2026-64481, CVE-2026-64482, CVE-2026-64483,\nCVE-2026-64484, CVE-2026-64485, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64490, CVE-2026-64491,\nCVE-2026-64492, CVE-2026-64493, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64499, CVE-2026-64500,\nCVE-2026-64501, CVE-2026-64502, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64507, CVE-2026-64508, CVE-2026-64509,\nCVE-2026-64510, CVE-2026-64511, CVE-2026-64512, CVE-2026-64513,\nCVE-2026-64514, CVE-2026-64529, CVE-2026-64531, CVE-2026-64536,\nCVE-2026-64556, CVE-2026-64588, CVE-2026-64589, CVE-2026-64590,\nCVE-2026-64591, CVE-2026-64592, CVE-2026-64593, CVE-2026-64594,\nCVE-2026-64596, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64601, CVE-2026-64602, CVE-2026-64603,\nCVE-2026-64604, CVE-2026-68084, CVE-2026-68085, CVE-2026-68087,\nCVE-2026-68088, CVE-2026-68089, CVE-2026-68090, CVE-2026-68091,\nCVE-2026-68092, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461,\nCVE-2026-74584, CVE-2026-80591, CVE-2026-80952, CVE-2026-90386)\n","status":"published","published":"2026-09-22T09:39:41Z","modified":"2026-11-09T12:46:55.618600704Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8886-1","title":"linux-nvidia-tegra vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Intel NPU Driver;\n  - Android drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Texas Instruments network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - Parport drivers;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - System reset/shutdown drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SPI subsystem;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Glob pattern matching library;\n  - MAC80211 subsystem;\n  - Mellanox drivers;\n  - Networking core;\n  - Network sockets;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IPv4 networking;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Kernel CPU control infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - QCOM ASoC drivers;\n  - Simple audio multiplexer codec driver;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - Amlogic Meson SoC drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2025-37807, CVE-2026-23265, CVE-2026-43022, CVE-2026-46321,\nCVE-2026-46322, CVE-2026-52917, CVE-2026-52923, CVE-2026-52927,\nCVE-2026-52929, CVE-2026-52935, CVE-2026-52942, CVE-2026-52943,\nCVE-2026-52947, CVE-2026-52994, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53143, CVE-2026-53146, CVE-2026-53147,\nCVE-2026-53149, CVE-2026-53156, CVE-2026-53157, CVE-2026-53160,\nCVE-2026-53161, CVE-2026-53184, CVE-2026-53189, CVE-2026-53194,\nCVE-2026-53195, CVE-2026-53199, CVE-2026-53202, CVE-2026-53205,\nCVE-2026-53209, CVE-2026-53223, CVE-2026-53229, CVE-2026-53253,\nCVE-2026-53255, CVE-2026-53267, CVE-2026-53268, CVE-2026-53272,\nCVE-2026-53329, CVE-2026-53330, CVE-2026-53356, CVE-2026-53362,\nCVE-2026-53365, CVE-2026-53366, CVE-2026-53381, CVE-2026-53383,\nCVE-2026-53387, CVE-2026-53388, CVE-2026-53389, CVE-2026-53390,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53397, CVE-2026-53400,\nCVE-2026-53401, CVE-2026-53402, CVE-2026-63794, CVE-2026-63802,\nCVE-2026-63803, CVE-2026-63805, CVE-2026-63806, CVE-2026-63809,\nCVE-2026-63812, CVE-2026-63814, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63819, CVE-2026-63823, CVE-2026-63824, CVE-2026-63827,\nCVE-2026-63833, CVE-2026-63867, CVE-2026-63869, CVE-2026-63870,\nCVE-2026-63875, CVE-2026-63879, CVE-2026-63881, CVE-2026-63884,\nCVE-2026-63889, CVE-2026-63909, CVE-2026-63913, CVE-2026-63920,\nCVE-2026-63925, CVE-2026-63927, CVE-2026-63930, CVE-2026-63942,\nCVE-2026-63954, CVE-2026-63968, CVE-2026-63970, CVE-2026-63971,\nCVE-2026-63985, CVE-2026-64002, CVE-2026-64003, CVE-2026-64004,\nCVE-2026-64005, CVE-2026-64009, CVE-2026-64017, CVE-2026-64023,\nCVE-2026-64026, CVE-2026-64036, CVE-2026-64095, CVE-2026-64123,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64210, CVE-2026-64222,\nCVE-2026-64239, CVE-2026-64242, CVE-2026-64243, CVE-2026-64245,\nCVE-2026-64246, CVE-2026-64266, CVE-2026-64270, CVE-2026-64271,\nCVE-2026-64272, CVE-2026-64273, CVE-2026-64274, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64279, CVE-2026-64283, CVE-2026-64286,\nCVE-2026-64287, CVE-2026-64296, CVE-2026-64298, CVE-2026-64299,\nCVE-2026-64304, CVE-2026-64312, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64333,\nCVE-2026-64368, CVE-2026-64372, CVE-2026-64374, CVE-2026-64375,\nCVE-2026-64378, CVE-2026-64379, CVE-2026-64380, CVE-2026-64388,\nCVE-2026-64389, CVE-2026-64395, CVE-2026-64398, CVE-2026-64401,\nCVE-2026-64402, CVE-2026-64403, CVE-2026-64411, CVE-2026-64412,\nCVE-2026-64413, CVE-2026-64418, CVE-2026-64420, CVE-2026-64422,\nCVE-2026-64423, CVE-2026-64430, CVE-2026-64432, CVE-2026-64435,\nCVE-2026-64436, CVE-2026-64440, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64448, CVE-2026-64449, CVE-2026-64452,\nCVE-2026-64456, CVE-2026-64463, CVE-2026-64468, CVE-2026-64469,\nCVE-2026-64481, CVE-2026-64496, CVE-2026-64524, CVE-2026-64532,\nCVE-2026-64533, CVE-2026-64536, CVE-2026-64539, CVE-2026-64540,\nCVE-2026-64543, CVE-2026-64545, CVE-2026-64546, CVE-2026-64547,\nCVE-2026-64550, CVE-2026-64556, CVE-2026-64560, CVE-2026-64563,\nCVE-2026-64567, CVE-2026-64568, CVE-2026-64570, CVE-2026-64574,\nCVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64580,\nCVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64585, CVE-2026-64599, CVE-2026-64600, CVE-2026-68091,\nCVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68100,\nCVE-2026-68104, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68116, CVE-2026-68118, CVE-2026-68119, CVE-2026-68121,\nCVE-2026-68125, CVE-2026-68129, CVE-2026-68131, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68145,\nCVE-2026-68148, CVE-2026-68149, CVE-2026-68153, CVE-2026-68155,\nCVE-2026-68157, CVE-2026-68178, CVE-2026-68179, CVE-2026-68189,\nCVE-2026-68192, CVE-2026-68196, CVE-2026-68199, CVE-2026-68202,\nCVE-2026-68204, CVE-2026-68216, CVE-2026-68219, CVE-2026-68222,\nCVE-2026-68236, CVE-2026-68245, CVE-2026-68253, CVE-2026-68255,\nCVE-2026-68258, CVE-2026-68260, CVE-2026-68262, CVE-2026-68263,\nCVE-2026-68266, CVE-2026-68273, CVE-2026-68284, CVE-2026-68287,\nCVE-2026-68290, CVE-2026-68293, CVE-2026-68294, CVE-2026-68297,\nCVE-2026-68299, CVE-2026-68314, CVE-2026-68315, CVE-2026-68320,\nCVE-2026-68322, CVE-2026-68323, CVE-2026-68326, CVE-2026-68329,\nCVE-2026-68335, CVE-2026-68338, CVE-2026-68340, CVE-2026-68348,\nCVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68370,\nCVE-2026-68371, CVE-2026-68373, CVE-2026-68376, CVE-2026-68377,\nCVE-2026-68383, CVE-2026-68389, CVE-2026-68391, CVE-2026-68392,\nCVE-2026-68397, CVE-2026-68398, CVE-2026-68399, CVE-2026-68400,\nCVE-2026-68401, CVE-2026-68402, CVE-2026-68404, CVE-2026-68408,\nCVE-2026-68409, CVE-2026-68414, CVE-2026-68417, CVE-2026-68419,\nCVE-2026-68425, CVE-2026-68432, CVE-2026-68433, CVE-2026-68442,\nCVE-2026-68445, CVE-2026-68446, CVE-2026-68447, CVE-2026-68451,\nCVE-2026-68452, CVE-2026-68453, CVE-2026-68454, CVE-2026-68466,\nCVE-2026-68467, CVE-2026-68471, CVE-2026-68474, CVE-2026-68479,\nCVE-2026-72005, CVE-2026-72009, CVE-2026-72012, CVE-2026-72019,\nCVE-2026-72021, CVE-2026-72024, CVE-2026-72029, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72045, CVE-2026-72049, CVE-2026-72051,\nCVE-2026-72052, CVE-2026-72053, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72057, CVE-2026-72061, CVE-2026-72066, CVE-2026-72067,\nCVE-2026-72072, CVE-2026-72089, CVE-2026-72099, CVE-2026-72102,\nCVE-2026-72105, CVE-2026-72107, CVE-2026-72108, CVE-2026-72109,\nCVE-2026-72110, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72133, CVE-2026-72135, CVE-2026-72136, CVE-2026-72144,\nCVE-2026-72146, CVE-2026-72148, CVE-2026-72149, CVE-2026-72157,\nCVE-2026-72160, CVE-2026-72162, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72170, CVE-2026-72171, CVE-2026-72172, CVE-2026-72175,\nCVE-2026-72181, CVE-2026-72195, CVE-2026-72196, CVE-2026-72197,\nCVE-2026-72213, CVE-2026-72225, CVE-2026-72227, CVE-2026-72231,\nCVE-2026-72232, CVE-2026-72233, CVE-2026-72235, CVE-2026-72242,\nCVE-2026-72243, CVE-2026-72244, CVE-2026-72247, CVE-2026-72250,\nCVE-2026-72252, CVE-2026-72253, CVE-2026-72254, CVE-2026-72261,\nCVE-2026-72262, CVE-2026-72282, CVE-2026-72284, CVE-2026-72297,\nCVE-2026-72298, CVE-2026-72301, CVE-2026-72302, CVE-2026-72304,\nCVE-2026-72310, CVE-2026-72312, CVE-2026-72314, CVE-2026-72330,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72338, CVE-2026-72340,\nCVE-2026-72342, CVE-2026-72343, CVE-2026-72347, CVE-2026-72350,\nCVE-2026-72352, CVE-2026-72369, CVE-2026-72371, CVE-2026-72373,\nCVE-2026-72374, CVE-2026-72375, CVE-2026-72378, CVE-2026-72382,\nCVE-2026-72389, CVE-2026-72390, CVE-2026-72397, CVE-2026-72400,\nCVE-2026-72404, CVE-2026-72405, CVE-2026-72406, CVE-2026-72409,\nCVE-2026-72410, CVE-2026-72416, CVE-2026-72418, CVE-2026-72419,\nCVE-2026-72420, CVE-2026-72423, CVE-2026-72425, CVE-2026-72427,\nCVE-2026-72435, CVE-2026-72438, CVE-2026-72440, CVE-2026-72444,\nCVE-2026-72449, CVE-2026-72450, CVE-2026-72459, CVE-2026-72460,\nCVE-2026-72464, CVE-2026-72469, CVE-2026-72470, CVE-2026-72476,\nCVE-2026-72478, CVE-2026-72480, CVE-2026-72483, CVE-2026-72485,\nCVE-2026-72492, CVE-2026-72502, CVE-2026-74256, CVE-2026-74257,\nCVE-2026-74258, CVE-2026-74262, CVE-2026-74270, CVE-2026-74281,\nCVE-2026-74282, CVE-2026-74283, CVE-2026-74288, CVE-2026-74289,\nCVE-2026-74292, CVE-2026-74293, CVE-2026-74294, CVE-2026-74295,\nCVE-2026-74296, CVE-2026-74297, CVE-2026-74300, CVE-2026-74312,\nCVE-2026-74313, CVE-2026-74314, CVE-2026-74317, CVE-2026-74321,\nCVE-2026-74330, CVE-2026-74334, CVE-2026-74338, CVE-2026-74340,\nCVE-2026-74341, CVE-2026-74344, CVE-2026-74347, CVE-2026-74349,\nCVE-2026-74356, CVE-2026-74359, CVE-2026-74363, CVE-2026-74365,\nCVE-2026-74374, CVE-2026-74375, CVE-2026-74377, CVE-2026-74378,\nCVE-2026-74380, CVE-2026-74385, CVE-2026-74387, CVE-2026-74388,\nCVE-2026-74390, CVE-2026-74397, CVE-2026-74438, CVE-2026-74443,\nCVE-2026-74444, CVE-2026-74446, CVE-2026-74450, CVE-2026-74453,\nCVE-2026-74454, CVE-2026-74456, CVE-2026-74461, CVE-2026-74465,\nCVE-2026-74467, CVE-2026-74469, CVE-2026-74470, CVE-2026-74471,\nCVE-2026-74479, CVE-2026-74481, CVE-2026-74482, CVE-2026-74485,\nCVE-2026-74488, CVE-2026-74490, CVE-2026-74492, CVE-2026-74496,\nCVE-2026-74497, CVE-2026-74507, CVE-2026-74508, CVE-2026-74509,\nCVE-2026-74510, CVE-2026-74512, CVE-2026-74515, CVE-2026-74516,\nCVE-2026-74518, CVE-2026-74519, CVE-2026-74522, CVE-2026-74523,\nCVE-2026-74527, CVE-2026-74530, CVE-2026-74531, CVE-2026-74533,\nCVE-2026-74534, CVE-2026-74535, CVE-2026-74536, CVE-2026-74537,\nCVE-2026-74540, CVE-2026-74544, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74550, CVE-2026-74551, CVE-2026-74557, CVE-2026-74563,\nCVE-2026-74564, CVE-2026-74565, CVE-2026-74567, CVE-2026-74572,\nCVE-2026-74574, CVE-2026-74575, CVE-2026-74578, CVE-2026-74579,\nCVE-2026-74580, CVE-2026-74581, CVE-2026-74582, CVE-2026-74583,\nCVE-2026-74584, CVE-2026-74586, CVE-2026-74587, CVE-2026-74588,\nCVE-2026-74589, CVE-2026-74590, CVE-2026-74592, CVE-2026-74594,\nCVE-2026-74595, CVE-2026-74597, CVE-2026-74598, CVE-2026-74601,\nCVE-2026-74603, CVE-2026-74604, CVE-2026-74605, CVE-2026-74606,\nCVE-2026-74607, CVE-2026-74608, CVE-2026-74609, CVE-2026-74610,\nCVE-2026-74611, CVE-2026-74612, CVE-2026-74613, CVE-2026-74614,\nCVE-2026-74615, CVE-2026-74616, CVE-2026-74621, CVE-2026-74624,\nCVE-2026-74625, CVE-2026-74626, CVE-2026-74628, CVE-2026-74630,\nCVE-2026-74631, CVE-2026-74632, CVE-2026-74634, CVE-2026-74635,\nCVE-2026-74637, CVE-2026-74641, CVE-2026-74646, CVE-2026-74647,\nCVE-2026-74648, CVE-2026-74649, CVE-2026-74651, CVE-2026-74656,\nCVE-2026-74660, CVE-2026-74661, CVE-2026-74662, CVE-2026-74663,\nCVE-2026-74666, CVE-2026-74667, CVE-2026-74668, CVE-2026-74669,\nCVE-2026-74670, CVE-2026-74675, CVE-2026-74678, CVE-2026-74684,\nCVE-2026-74687, CVE-2026-74688, CVE-2026-74689, CVE-2026-74690,\nCVE-2026-74691, CVE-2026-74692, CVE-2026-74695, CVE-2026-74696,\nCVE-2026-74697, CVE-2026-74700, CVE-2026-74701, CVE-2026-74704,\nCVE-2026-74705, CVE-2026-74710, CVE-2026-74711, CVE-2026-74713,\nCVE-2026-74714, CVE-2026-74715, CVE-2026-74717, CVE-2026-74720,\nCVE-2026-74723, CVE-2026-74724, CVE-2026-74725, CVE-2026-74726,\nCVE-2026-74730, CVE-2026-74733, CVE-2026-74736, CVE-2026-74737,\nCVE-2026-74739, CVE-2026-74743, CVE-2026-74744, CVE-2026-74746,\nCVE-2026-74747, CVE-2026-74748, CVE-2026-74752, CVE-2026-80521,\nCVE-2026-80526, CVE-2026-80527, CVE-2026-80528, CVE-2026-80536,\nCVE-2026-80540, CVE-2026-80541, CVE-2026-80547, CVE-2026-80548,\nCVE-2026-80549, CVE-2026-80550, CVE-2026-80551, CVE-2026-80552,\nCVE-2026-80553, CVE-2026-80554, CVE-2026-80555, CVE-2026-80556,\nCVE-2026-80557, CVE-2026-80558, CVE-2026-80559, CVE-2026-80560,\nCVE-2026-80561, CVE-2026-80565, CVE-2026-80568, CVE-2026-80569,\nCVE-2026-80570, CVE-2026-80572, CVE-2026-80574, CVE-2026-80576,\nCVE-2026-80578, CVE-2026-80579, CVE-2026-80580, CVE-2026-80583,\nCVE-2026-80584, CVE-2026-80585, CVE-2026-80586, CVE-2026-80587,\nCVE-2026-80589, CVE-2026-80721, CVE-2026-80901, CVE-2026-97509)\n","status":"published","published":"2026-10-06T15:44:31Z","modified":"2026-11-09T12:49:02.511325613Z","updated_at":"2026-11-09T13:27:42.046613Z"}]}}