{"id":"CVE-2026-72135","aliases":["BELL-CVE-2026-72135","DEBIAN-CVE-2026-72135","EUVD-2026-58893","GHSA-mgw8-pg67-5pw5","OESA-2026-3532","OESA-2026-3703","OESA-2026-3704","SUSE-SU-2026:24181-1","SUSE-SU-2026:24182-1","SUSE-SU-2026:24315-1","SUSE-SU-2026:24316-1","SUSE-SU-2026:4279-1","SUSE-SU-2026:4282-1","SUSE-SU-2026:4284-1","SUSE-SU-2026:4347-1","SUSE-SU-2026:4369-1","SUSE-SU-2026:4595-1","SUSE-SU-2026:4640-1","SUSE-SU-2026:4706-1","UBUNTU-CVE-2026-72135","USN-8875-1","USN-8875-2","USN-8876-1","USN-8877-1","USN-8878-1","USN-8879-1","USN-8886-1","USN-8887-1","USN-8887-2","USN-8887-3","USN-8888-1","USN-8888-2","USN-8889-1","USN-8917-1","USN-8918-1","USN-8963-1","USN-9003-1"],"status":"published","title":"tpm: Make the TPM character devices non-seekable","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u003ef_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00169,"percentile":0.06249,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-08-15T05:53:10Z","modified":"2026-11-10T02:51:20Z","fixes":[{"ecosystem":"Alpaquita:23","package":"linux-lts","fixed_in":["6.1.182-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"linux-lts","fixed_in":["6.12.103-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-lts","fixed_in":["6.18.43-r0"],"sources":["osv"]},{"ecosystem":"Linux","package":"Kernel","fixed_in":["5.10.261","5.15.212","6.1.178","6.6.145","6.12.97","6.18.40","7.1.5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"linux","fixed_in":["6.1.180-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.12.100-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["7.1.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws-5.15","fixed_in":["5.15.0-1117.124~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-5.15","fixed_in":["5.15.0-1123.132~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","fixed_in":["5.15.0-1122.131~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp-5.15","fixed_in":["5.15.0-1118.128~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-hwe-5.15","fixed_in":["5.15.0-198.208~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm-5.15","fixed_in":["5.15.0-1111.115~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-intel-iotg-5.15","fixed_in":["5.15.0-1112.118~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-lowlatency-hwe-5.15","fixed_in":["5.15.0-195.205~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-nvidia-tegra-5.15","fixed_in":["5.15.0-1070.72~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle-5.15","fixed_in":["5.15.0-1114.120~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-riscv-5.15","fixed_in":["5.15.0-1111.115~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux","fixed_in":["5.15.0-198.208"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","fixed_in":["5.15.0-1117.124"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","fixed_in":["5.15.0-1123.132"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","fixed_in":["5.15.0-1122.131"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","fixed_in":["5.15.0-1118.128"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","fixed_in":["5.15.0-1113.119"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","fixed_in":["5.15.0-1100.108"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","fixed_in":["5.15.0-1111.115"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","fixed_in":["5.15.0-1112.118"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","fixed_in":["5.15.0-1109.114"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","fixed_in":["5.15.0-195.205"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","fixed_in":["5.15.0-1112.113"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","fixed_in":["5.15.0-1070.72"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","fixed_in":["5.15.0-1059.59"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","fixed_in":["5.15.0-1114.120"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","fixed_in":["5.15.0-1080.84"],"sources":["osv"]},{"ecosystem":"Ubuntu:Nvidia-BlueField:22.04:LTS","package":"linux-bluefield","fixed_in":["5.15.0-1101.103"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","fixed_in":["5.15.0-1109.111"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","fixed_in":["5.15.0-1116.125"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-aws-fips","fixed_in":["5.15.0-1117.124+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-azure-fips","fixed_in":["5.15.0-1123.132+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-fips","fixed_in":["5.15.0-198.208+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-gcp-fips","fixed_in":["5.15.0-1118.128+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux","fixed_in":["6.8.0-147.147"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","fixed_in":["6.8.0-1067.70"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-7.0","fixed_in":["7.0.0-1014.14~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","fixed_in":["6.8.0-1071.79"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-7.0","fixed_in":["7.0.0-1017.17~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","fixed_in":["6.8.0-1069.76"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-7.0","fixed_in":["7.0.0-1016.16~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","fixed_in":["6.8.0-1071.79"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-7.0","fixed_in":["7.0.0-1014.14~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","fixed_in":["6.8.0-1066.74"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","fixed_in":["6.8.0-1052.56"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","fixed_in":["7.0.0-38.38~24.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","fixed_in":["6.8.0-1067.68"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","fixed_in":["6.8.0-147.147.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-7.0","fixed_in":["7.0.0-1024.25~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","fixed_in":["6.8.0-1036.39"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","fixed_in":["6.8.0-1064.67"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-7.0","fixed_in":["7.0.0-1013.13~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-7.0","fixed_in":["7.0.0-38.38.1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-vmware","fixed_in":["6.8.0-1008.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Nvidia-BlueField:24.04:LTS","package":"linux-bluefield","fixed_in":["6.8.0-1033.38"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","fixed_in":["6.8.1-1062.63"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","fixed_in":["6.8.0-1067.70+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","fixed_in":["6.8.0-1071.79+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","fixed_in":["6.8.0-147.147+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","fixed_in":["6.8.0-1071.79+fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux","fixed_in":["7.0.0-38.38"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","fixed_in":["7.0.0-1014.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure","fixed_in":["7.0.0-1017.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure-fde","fixed_in":["7.0.0-1016.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","fixed_in":["7.0.0-1014.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-gke","fixed_in":["7.0.0-1008.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","fixed_in":["7.0.0-1015.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia-bos","fixed_in":["7.0.0-2022.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","fixed_in":["7.0.0-1015.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","fixed_in":["7.0.0-1013.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-realtime","fixed_in":["7.0.0-38.38.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-riscv","fixed_in":["7.0.0-38.38.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.177-r0"},{"fixed":"6.1.182-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.95-r0"},{"fixed":"6.12.103-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.38-r0"},{"fixed":"6.18.43-r0"}]}]},{"source":"osv","ecosystem":"Linux","package":"Kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.180-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.123-1","6.1.124-1","6.1.128-1","6.1.129-1","6.1.133-1","6.1.135-1","6.1.137-1","6.1.139-1","6.1.140-1","6.1.147-1","6.1.148-1","6.1.153-1","6.1.158-1","6.1.159-1","6.1.162-1","6.1.164-1","6.1.170-1","6.1.170-2","6.1.170-3","6.1.172-1","6.1.174-1","6.1.176-1","6.1.177-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.100-1"}]}],"versions":["6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1"]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.5-1"}]}],"versions":["6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.111-1","6.12.113-1","6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.10-1","6.16.11-1","6.16.12-1","6.16.12-1~bpo13+1","6.16.12-2","6.16.3-1","6.16.3-1~bpo13+1","6.16.5-1","6.16.6-1","6.16.7-1","6.16.8-1","6.16.9-1","6.16~rc7-1~exp1","6.17.10-1","6.17.11-1","6.17.12-1","6.17.13-1","6.17.13-1~bpo13+1","6.17.2-1~exp1","6.17.5-1~exp1","6.17.6-1","6.17.7-1","6.17.7-2","6.17.8-1","6.17.8-1~bpo13+1","6.17.9-1","6.18.1-1~exp1","6.18.10-1","6.18.12-1","6.18.12-1~bpo13+1","6.18.13-1","6.18.14-1","6.18.15-1","6.18.15-1~bpo13+1","6.18.2-1~exp1","6.18.3-1","6.18.5-1","6.18.5-1~bpo13+1","6.18.8-1","6.18.9-1","6.18.9-1~bpo13+1","6.18~rc4-1~exp1","6.18~rc4-1~exp2","6.18~rc5-1~exp1","6.18~rc6-1~exp1","6.18~rc7-1~exp1","6.19-1~exp1","6.19.10-1","6.19.10-1~bpo13+1","6.19.11-1","6.19.11-1~bpo13+1","6.19.12-1","6.19.13-1","6.19.13-1~bpo13+1","6.19.14-1","6.19.14-1~bpo13+1","6.19.2-1~exp1","6.19.3-1~exp1","6.19.4-1~exp1","6.19.5-1~exp1","6.19.6-1","6.19.6-2","6.19.6-2~bpo13+1","6.19.8-1","6.19.8-1~bpo13+1","6.19~rc4-1~exp1","6.19~rc5-1~exp1","6.19~rc6-1~exp1","6.19~rc7-1~exp1","6.19~rc8-1~exp1","7.0-1~exp1","7.0.1-1~exp1","7.0.10-1","7.0.10-1~bpo13+1","7.0.12-1","7.0.12-2","7.0.12-2~bpo13+1","7.0.13-1","7.0.13-1~bpo13+1","7.0.14-1","7.0.3-1","7.0.4-1","7.0.4-1~bpo13+1","7.0.7-1","7.0.7-1~bpo13+1","7.0.9-1","7.0.9-1~bpo13+1","7.1.1-1~exp1","7.1.2-1~exp1","7.1.3-1","7.1.3-1+sunvdc","7.1.3-1~bpo13+1","7.1.4-1","7.1~rc2-1~exp1","7.1~rc3-1~exp1","7.1~rc4-1~exp1","7.1~rc4-1~exp2","7.1~rc5-1~exp1","7.1~rc7-1~exp1"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-330.0.0.231.oe2203sp4"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-145.1.24.161.oe2403sp1"}]}],"bundled":51},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-145.3.29.160.oe2403sp3"}]}],"bundled":165},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1.159998.21.38"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.6.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1.159998.21.38"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.186.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.186.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.186.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.186.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.328.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP5","package":"kgraft-patch-SLE12-SP5_Update_87","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-8.5.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.328.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.328.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.328.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.328.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.328.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.328.1"}]}],"bundled":234},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2.150400.24.120.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2.150400.24.120.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_59","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.9.5.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2.150400.24.120.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2.150400.24.120.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2.150400.24.120.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.2.150400.24.120.2"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.240.1"}]}],"bundled":101},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.161.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.161.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP6","package":"kernel-livepatch-SLE15-SP6_Update_31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150600.13.3.4"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1.150600.12.62.4"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1.150600.12.62.4"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.135.1"}]}],"bundled":131},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1.150500.6.87.4"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5_Update_45","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.5.3"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1.150500.6.87.4"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1.150500.6.87.4"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1.150500.6.87.4"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1.150500.6.87.4"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.189.1"}]}],"bundled":84},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7-RT_Update_21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.1.3.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.78.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.78.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.78.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1.150700.17.47.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7_Update_22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.15.3.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-aws-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1018.18~18.04.1","5.4.0-1020.20~18.04.2","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.30~18.04.1","5.4.0-1030.31~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1038.40~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1045.47~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1058.61~18.04.3","5.4.0-1059.62~18.04.1","5.4.0-1060.63~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1081.88~18.04.1","5.4.0-1083.90~18.04.1","5.4.0-1084.91~18.04.1","5.4.0-1085.92~18.04.1","5.4.0-1086.93~18.04.1","5.4.0-1088.96~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1090.98~18.04.1","5.4.0-1092.100~18.04.2","5.4.0-1093.102~18.04.2","5.4.0-1094.102~18.04.1","5.4.0-1096.104~18.04.1","5.4.0-1097.105~18.04.1","5.4.0-1099.107~18.04.1","5.4.0-1100.108~18.04.1","5.4.0-1101.109~18.04.1","5.4.0-1103.111~18.04.1","5.4.0-1104.112~18.04.1","5.4.0-1105.113~18.04.1","5.4.0-1106.114~18.04.1","5.4.0-1107.115~18.04.1","5.4.0-1108.116~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.2","5.4.0-1113.123~18.04.1","5.4.0-1114.124~18.04.1","5.4.0-1116.126~18.04.1","5.4.0-1117.127~18.04.1","5.4.0-1118.128~18.04.1","5.4.0-1119.129~18.04.1","5.4.0-1120.130~18.04.1","5.4.0-1121.131~18.04.1","5.4.0-1122.132~18.04.1","5.4.0-1123.133~18.04.1","5.4.0-1124.134~18.04.1","5.4.0-1125.135~18.04.1","5.4.0-1126.136~18.04.1","5.4.0-1127.137~18.04.2","5.4.0-1128.138~18.04.1","5.4.0-1129.139~18.04.1","5.4.0-1130.140~18.04.1","5.4.0-1131.141~18.04.1","5.4.0-1132.142~18.04.1","5.4.0-1133.143~18.04.1","5.4.0-1134.144~18.04.1","5.4.0-1135.145~18.04.1","5.4.0-1136.146~18.04.1","5.4.0-1137.147~18.04.1","5.4.0-1139.149~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1147.157~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1153.163~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1156.166~18.04.1","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1160.170~18.04.1","5.4.0-1161.172~18.04.1","5.4.0-1162.173~18.04.1","5.4.0-1163.174~18.04.1","5.4.0-1165.176~18.04.1","5.4.0-1167.178~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-azure-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.20~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1023.23~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1026.26~18.04.1","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.36~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1055.57~18.04.1","5.4.0-1056.58~18.04.1","5.4.0-1058.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1069.72~18.04.1","5.4.0-1070.73~18.04.1","5.4.0-1072.75~18.04.1","5.4.0-1073.76~18.04.1","5.4.0-1074.77~18.04.1","5.4.0-1077.80~18.04.1","5.4.0-1078.81~18.04.1","5.4.0-1080.83~18.04.2","5.4.0-1083.87~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1089.94~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1091.96~18.04.1","5.4.0-1094.100~18.04.1","5.4.0-1095.101~18.04.1","5.4.0-1098.104~18.04.2","5.4.0-1100.106~18.04.1","5.4.0-1101.107~18.04.1","5.4.0-1103.109~18.04.1","5.4.0-1104.110~18.04.1","5.4.0-1105.111~18.04.1","5.4.0-1106.112~18.04.1","5.4.0-1107.113~18.04.1","5.4.0-1108.114~18.04.1","5.4.0-1109.115~18.04.1","5.4.0-1110.116~18.04.1","5.4.0-1111.117~18.04.1","5.4.0-1112.118~18.04.1","5.4.0-1113.119~18.04.1","5.4.0-1115.122~18.04.1","5.4.0-1116.123~18.04.1","5.4.0-1117.124~18.04.1","5.4.0-1118.125~18.04.1","5.4.0-1119.126~18.04.2","5.4.0-1120.127~18.04.1","5.4.0-1121.128~18.04.1","5.4.0-1122.129~18.04.1","5.4.0-1123.130~18.04.1","5.4.0-1124.131~18.04.1","5.4.0-1126.133~18.04.1","5.4.0-1127.134~18.04.1","5.4.0-1128.135~18.04.1","5.4.0-1129.136~18.04.1","5.4.0-1130.137~18.04.1","5.4.0-1131.138~18.04.1","5.4.0-1132.139~18.04.1","5.4.0-1133.140~18.04.1","5.4.0-1134.141~18.04.1","5.4.0-1135.142~18.04.1","5.4.0-1136.143~18.04.1","5.4.0-1137.144~18.04.1","5.4.0-1138.145~18.04.1","5.4.0-1139.146~18.04.1","5.4.0-1140.147~18.04.1","5.4.0-1142.149~18.04.1","5.4.0-1143.150~18.04.1","5.4.0-1145.152~18.04.1","5.4.0-1147.154~18.04.1","5.4.0-1148.155~18.04.1","5.4.0-1149.156~18.04.1","5.4.0-1150.157~18.04.1","5.4.0-1151.158~18.04.1","5.4.0-1152.159~18.04.1","5.4.0-1153.160~18.04.1","5.4.0-1154.161~18.04.1","5.4.0-1156.163~18.04.1","5.4.0-1157.164~18.04.1","5.4.0-1161.167~18.04.1","5.4.0-1162.168~18.04.1","5.4.0-1163.169~18.04.1","5.4.0-1164.170~18.04.1","5.4.0-1166.172~18.04.1","5.4.0-1167.173~18.04.1","5.4.0-1168.174~18.04.1","5.4.0-1169.175~18.04.1","5.4.0-1170.176~18.04.1","5.4.0-1171.177~18.04.1","5.4.0-1172.178~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-gcp-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.2","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1040.43~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.2","5.4.0-1046.49~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1051.55~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1060.64~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1065.69~18.04.1","5.4.0-1067.71~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.94~18.04.1","5.4.0-1087.95~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1096.105~18.04.2","5.4.0-1097.106~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.2","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.1","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1128.137~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1139.148~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.150~18.04.1","5.4.0-1142.151~18.04.1","5.4.0-1143.152~18.04.1","5.4.0-1145.154~18.04.1","5.4.0-1147.156~18.04.1","5.4.0-1148.157~18.04.1","5.4.0-1149.158~18.04.1","5.4.0-1150.159~18.04.1","5.4.0-1151.160~18.04.1","5.4.0-1152.161~18.04.1","5.4.0-1153.162~18.04.1","5.4.0-1154.163~18.04.1","5.4.0-1155.164~18.04.1","5.4.0-1156.165~18.04.1","5.4.0-1157.166~18.04.1","5.4.0-1159.168~18.04.1","5.4.0-1160.169~18.04.1","5.4.0-1161.170~18.04.1","5.4.0-1162.171~18.04.1","5.4.0-1163.172~18.04.1","5.4.0-1164.173~18.04.1","5.4.0-1165.174~18.04.1","5.4.0-1166.175~18.04.1","5.4.0-1167.176~18.04.1","5.4.0-1168.178~18.04.1","5.4.0-1169.179~18.04.1","5.4.0-1170.180~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-hwe-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-37.41~18.04.1","5.4.0-39.43~18.04.1","5.4.0-40.44~18.04.1","5.4.0-42.46~18.04.1","5.4.0-45.49~18.04.2","5.4.0-47.51~18.04.1","5.4.0-48.52~18.04.1","5.4.0-51.56~18.04.1","5.4.0-52.57~18.04.1","5.4.0-53.59~18.04.1","5.4.0-54.60~18.04.1","5.4.0-56.62~18.04.1","5.4.0-58.64~18.04.1","5.4.0-59.65~18.04.1","5.4.0-60.67~18.04.1","5.4.0-62.70~18.04.1","5.4.0-64.72~18.04.1","5.4.0-65.73~18.04.1","5.4.0-66.74~18.04.2","5.4.0-67.75~18.04.1","5.4.0-70.78~18.04.1","5.4.0-71.79~18.04.1","5.4.0-72.80~18.04.1","5.4.0-73.82~18.04.1","5.4.0-74.83~18.04.1","5.4.0-77.86~18.04.1","5.4.0-80.90~18.04.1","5.4.0-81.91~18.04.1","5.4.0-84.94~18.04.1","5.4.0-86.97~18.04.1","5.4.0-87.98~18.04.1","5.4.0-89.100~18.04.1","5.4.0-90.101~18.04.1","5.4.0-91.102~18.04.1","5.4.0-92.103~18.04.2","5.4.0-94.106~18.04.1","5.4.0-96.109~18.04.1","5.4.0-97.110~18.04.1","5.4.0-99.112~18.04.1","5.4.0-100.113~18.04.1","5.4.0-104.118~18.04.1","5.4.0-105.119~18.04.1","5.4.0-107.121~18.04.1","5.4.0-109.123~18.04.1","5.4.0-110.124~18.04.1","5.4.0-113.127~18.04.1","5.4.0-117.132~18.04.1","5.4.0-120.136~18.04.1","5.4.0-121.137~18.04.1","5.4.0-122.138~18.04.1","5.4.0-124.140~18.04.1","5.4.0-125.141~18.04.1","5.4.0-126.142~18.04.1","5.4.0-128.144~18.04.1","5.4.0-131.147~18.04.1","5.4.0-132.148~18.04.1","5.4.0-133.149~18.04.1","5.4.0-135.152~18.04.2","5.4.0-136.153~18.04.1","5.4.0-137.154~18.04.1","5.4.0-139.156~18.04.1","5.4.0-144.161~18.04.1","5.4.0-146.163~18.04.1","5.4.0-147.164~18.04.1","5.4.0-148.165~18.04.1","5.4.0-149.166~18.04.1","5.4.0-150.167~18.04.1","5.4.0-152.169~18.04.1","5.4.0-153.170~18.04.1","5.4.0-155.172~18.04.1","5.4.0-156.173~18.04.1","5.4.0-159.176~18.04.1","5.4.0-162.179~18.04.1","5.4.0-163.180~18.04.1","5.4.0-164.181~18.04.1","5.4.0-165.182~18.04.1","5.4.0-166.183~18.04.2","5.4.0-167.184~18.04.1","5.4.0-169.187~18.04.1","5.4.0-170.188~18.04.1","5.4.0-171.189~18.04.1","5.4.0-172.190~18.04.1","5.4.0-173.191~18.04.1","5.4.0-174.193~18.04.1","5.4.0-175.195~18.04.1","5.4.0-177.197~18.04.1","5.4.0-181.201~18.04.1","5.4.0-182.202~18.04.1","5.4.0-186.206~18.04.1","5.4.0-187.207~18.04.1","5.4.0-189.209~18.04.1","5.4.0-190.210~18.04.1","5.4.0-192.212~18.04.1","5.4.0-193.213~18.04.1","5.4.0-195.215~18.04.1","5.4.0-196.216~18.04.1","5.4.0-198.218~18.04.1","5.4.0-200.220~18.04.1","5.4.0-202.222~18.04.1","5.4.0-204.224~18.04.1","5.4.0-205.225~18.04.1","5.4.0-208.228~18.04.1","5.4.0-211.231~18.04.1","5.4.0-212.232~18.04.1","5.4.0-214.234~18.04.1","5.4.0-215.235~18.04.1","5.4.0-216.236~18.04.1","5.4.0-218.238~18.04.1","5.4.0-219.239~18.04.1","5.4.0-220.240~18.04.1","5.4.0-221.241~18.04.1","5.4.0-222.242~18.04.1","5.4.0-223.243~18.04.1","5.4.0-224.244~18.04.1","5.4.0-225.245~18.04.1","5.4.0-227.247~18.04.1","5.4.0-228.248~18.04.1","5.4.0-229.249~18.04.1","5.4.0-231.251~18.04.1","5.4.0-233.253~18.04.1","5.4.0-234.254~18.04.1","5.4.0-238.258~18.04.1","5.4.0-241.261~18.04.1","5.4.0-242.262~18.04.1","5.4.0-244.264~18.04.1","5.4.0-245.265~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-ibm-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1010.11~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1017.19~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1020.22~18.04.1","5.4.0-1021.23~18.04.1","5.4.0-1023.25~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.32~18.04.1","5.4.0-1029.33~18.04.1","5.4.0-1031.35~18.04.1","5.4.0-1032.36~18.04.1","5.4.0-1033.37~18.04.1","5.4.0-1034.38~18.04.1","5.4.0-1036.41~18.04.1","5.4.0-1037.42~18.04.1","5.4.0-1040.45~18.04.2","5.4.0-1041.46~18.04.1","5.4.0-1042.47~18.04.1","5.4.0-1044.49~18.04.1","5.4.0-1045.50~18.04.1","5.4.0-1046.51~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1049.54~18.04.1","5.4.0-1050.55~18.04.1","5.4.0-1051.56~18.04.1","5.4.0-1052.57~18.04.1","5.4.0-1053.58~18.04.1","5.4.0-1054.59~18.04.1","5.4.0-1056.61~18.04.1","5.4.0-1057.62~18.04.1","5.4.0-1058.63~18.04.1","5.4.0-1059.64~18.04.1","5.4.0-1060.65~18.04.1","5.4.0-1061.66~18.04.1","5.4.0-1063.68~18.04.1","5.4.0-1064.69~18.04.1","5.4.0-1065.70~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1068.73~18.04.1","5.4.0-1069.74~18.04.1","5.4.0-1070.75~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1076.81~18.04.1","5.4.0-1077.82~18.04.1","5.4.0-1078.83~18.04.1","5.4.0-1079.84~18.04.1","5.4.0-1080.85~18.04.1","5.4.0-1081.86~18.04.1","5.4.0-1082.87~18.04.1","5.4.0-1083.88~18.04.1","5.4.0-1084.89~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1092.97~18.04.1","5.4.0-1093.98~18.04.1","5.4.0-1094.99~18.04.1","5.4.0-1095.100~18.04.1","5.4.0-1096.101~18.04.1","5.4.0-1097.102~18.04.1","5.4.0-1098.103~18.04.1","5.4.0-1099.104~18.04.1","5.4.0-1100.105~18.04.1","5.4.0-1102.107~18.04.1","5.4.0-1103.108~18.04.1","5.4.0-1104.109~18.04.1","5.4.0-1105.110~18.04.1","5.4.0-1107.112~18.04.1","5.4.0-1108.113~18.04.1","5.4.0-1109.114~18.04.1","5.4.0-1111.116~18.04.1","5.4.0-1112.117~18.04.1","5.4.0-1113.118~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-oracle-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.1","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1033.35","5.4.0-1034.36~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1039.42~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.1","5.4.0-1046.50~18.04.2","5.4.0-1048.52~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1054.58~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1061.65~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1069.75~18.04.1","5.4.0-1070.76~18.04.1","5.4.0-1071.77~18.04.1","5.4.0-1073.79~18.04.1","5.4.0-1076.83~18.04.1","5.4.0-1078.86~18.04.1","5.4.0-1079.87~18.04.1","5.4.0-1081.89~18.04.1","5.4.0-1082.90~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.95~18.04.1","5.4.0-1087.96~18.04.1","5.4.0-1090.99~18.04.2","5.4.0-1091.100~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1094.103~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1099.108~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.1","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.4","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1119.128~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1131.140~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.151~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1143.153~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1155.165~18.04.1","5.4.0-1156.166~18.04.2","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1159.169~18.04.1","5.4.0-1161.171~18.04.1","5.4.0-1162.172~18.04.1","5.4.0-1163.173~18.04.1","5.4.0-1164.174~18.04.1","5.4.0-1165.175~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-raspi-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1013.13~18.04.1","5.4.0-1015.15~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1021.24~18.04.1","5.4.0-1022.25~18.04.1","5.4.0-1023.26~18.04.1","5.4.0-1025.28~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.31~18.04.1","5.4.0-1029.32~18.04.1","5.4.0-1030.33~18.04.1","5.4.0-1032.35~18.04.1","5.4.0-1033.36~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1041.45~18.04.1","5.4.0-1042.46~18.04.3","5.4.0-1043.47~18.04.1","5.4.0-1044.48~18.04.1","5.4.0-1045.49~18.04.1","5.4.0-1046.50~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1050.56~18.04.1","5.4.0-1052.58~18.04.1","5.4.0-1053.60~18.04.1","5.4.0-1055.62~18.04.1","5.4.0-1056.63~18.04.1","5.4.0-1058.65~18.04.1","5.4.0-1059.66~18.04.1","5.4.0-1060.68~18.04.1","5.4.0-1062.70~18.04.1","5.4.0-1065.75~18.04.1","5.4.0-1066.76~18.04.1","5.4.0-1068.78~18.04.1","5.4.0-1069.79~18.04.1","5.4.0-1070.80~18.04.1","5.4.0-1071.81~18.04.1","5.4.0-1073.84~18.04.1","5.4.0-1074.85~18.04.1","5.4.0-1077.88~18.04.2","5.4.0-1078.89~18.04.1","5.4.0-1079.90~18.04.1","5.4.0-1080.91~18.04.1","5.4.0-1081.92~18.04.1","5.4.0-1082.93~18.04.1","5.4.0-1083.94~18.04.1","5.4.0-1084.95~18.04.1","5.4.0-1085.96~18.04.1","5.4.0-1086.97~18.04.1","5.4.0-1088.99~18.04.1","5.4.0-1089.100~18.04.1","5.4.0-1090.101~18.04.1","5.4.0-1091.102~18.04.1","5.4.0-1092.103~18.04.1","5.4.0-1093.104~18.04.1","5.4.0-1094.105~18.04.1","5.4.0-1095.106~18.04.1","5.4.0-1096.107~18.04.1","5.4.0-1097.109~18.04.2","5.4.0-1098.110~18.04.2","5.4.0-1100.112~18.04.1","5.4.0-1101.113~18.04.1","5.4.0-1102.114~18.04.1","5.4.0-1103.115~18.04.1","5.4.0-1104.116~18.04.1","5.4.0-1105.117~18.04.1","5.4.0-1106.118~18.04.1","5.4.0-1107.119~18.04.1","5.4.0-1108.120~18.04.1","5.4.0-1109.121~18.04.1","5.4.0-1110.122~18.04.1","5.4.0-1111.123~18.04.1","5.4.0-1112.124~18.04.1","5.4.0-1114.126~18.04.1","5.4.0-1115.127~18.04.1","5.4.0-1116.128~18.04.1","5.4.0-1117.129~18.04.1","5.4.0-1118.130~18.04.1","5.4.0-1119.131~18.04.1","5.4.0-1120.132~18.04.1","5.4.0-1121.133~18.04.1","5.4.0-1122.134~18.04.1","5.4.0-1129.142~18.04.1","5.4.0-1130.143~18.04.1","5.4.0-1131.144~18.04.1","5.4.0-1132.145~18.04.1","5.4.0-1133.146~18.04.1","5.4.0-1134.147~18.04.1","5.4.0-1135.148~18.04.1","5.4.0-1136.149~18.04.1","5.4.0-1137.150~18.04.1","5.4.0-1139.152~18.04.1","5.4.0-1140.153~18.04.1","5.4.0-1143.156~18.04.1","5.4.0-1144.157~18.04.1","5.4.0-1145.158~18.04.1","5.4.0-1146.159~18.04.1","5.4.0-1147.160~18.04.1","5.4.0-1148.161~18.04.1","5.4.0-1149.162~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-18.19","5.3.0-24.26","5.4.0-9.12","5.4.0-18.22","5.4.0-21.25","5.4.0-24.28","5.4.0-25.29","5.4.0-26.30","5.4.0-28.32","5.4.0-29.33","5.4.0-31.35","5.4.0-33.37","5.4.0-37.41","5.4.0-39.43","5.4.0-40.44","5.4.0-42.46","5.4.0-45.49","5.4.0-47.51","5.4.0-48.52","5.4.0-51.56","5.4.0-52.57","5.4.0-53.59","5.4.0-54.60","5.4.0-56.62","5.4.0-58.64","5.4.0-59.65","5.4.0-60.67","5.4.0-62.70","5.4.0-64.72","5.4.0-65.73","5.4.0-66.74","5.4.0-67.75","5.4.0-70.78","5.4.0-71.79","5.4.0-72.80","5.4.0-73.82","5.4.0-74.83","5.4.0-77.86","5.4.0-80.90","5.4.0-81.91","5.4.0-84.94","5.4.0-86.97","5.4.0-88.99","5.4.0-89.100","5.4.0-90.101","5.4.0-91.102","5.4.0-92.103","5.4.0-94.106","5.4.0-96.109","5.4.0-97.110","5.4.0-99.112","5.4.0-100.113","5.4.0-104.118","5.4.0-105.119","5.4.0-107.121","5.4.0-109.123","5.4.0-110.124","5.4.0-113.127","5.4.0-117.132","5.4.0-120.136","5.4.0-121.137","5.4.0-122.138","5.4.0-124.140","5.4.0-125.141","5.4.0-126.142","5.4.0-128.144","5.4.0-131.147","5.4.0-132.148","5.4.0-135.152","5.4.0-136.153","5.4.0-137.154","5.4.0-139.156","5.4.0-144.161","5.4.0-146.163","5.4.0-147.164","5.4.0-148.165","5.4.0-149.166","5.4.0-150.167","5.4.0-152.169","5.4.0-153.170","5.4.0-155.172","5.4.0-156.173","5.4.0-159.176","5.4.0-162.179","5.4.0-163.180","5.4.0-164.181","5.4.0-165.182","5.4.0-166.183","5.4.0-167.184","5.4.0-169.187","5.4.0-170.188","5.4.0-171.189","5.4.0-172.190","5.4.0-173.191","5.4.0-174.193","5.4.0-176.196","5.4.0-177.197","5.4.0-181.201","5.4.0-182.202","5.4.0-186.206","5.4.0-187.207","5.4.0-189.209","5.4.0-190.210","5.4.0-192.212","5.4.0-193.213","5.4.0-195.215","5.4.0-196.216","5.4.0-198.218","5.4.0-200.220","5.4.0-202.222","5.4.0-204.224","5.4.0-205.225","5.4.0-208.228","5.4.0-211.231","5.4.0-212.232","5.4.0-214.234","5.4.0-215.235","5.4.0-216.236","5.4.0-218.238","5.4.0-219.239","5.4.0-220.240","5.4.0-221.241","5.4.0-222.242","5.4.0-223.243","5.4.0-224.244","5.4.0-225.245","5.4.0-227.247","5.4.0-228.248","5.4.0-229.249","5.4.0-230.250","5.4.0-231.251","5.4.0-233.253","5.4.0-234.254","5.4.0-238.258","5.4.0-241.261","5.4.0-242.262","5.4.0-244.264","5.4.0-245.265"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.3.0-1010.11","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1017.17","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.37","5.4.0-1037.39","5.4.0-1038.40","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1045.47","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1088.96","5.4.0-1089.97","5.4.0-1092.100","5.4.0-1093.101","5.4.0-1094.102","5.4.0-1096.104","5.4.0-1097.105","5.4.0-1099.107","5.4.0-1100.108","5.4.0-1101.109","5.4.0-1102.110","5.4.0-1103.111","5.4.0-1104.112","5.4.0-1105.113","5.4.0-1106.114","5.4.0-1107.115","5.4.0-1108.116","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.123","5.4.0-1114.124","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1129.139","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1142.152","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1148.158","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1153.163","5.4.0-1154.164","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.172","5.4.0-1162.173","5.4.0-1163.174","5.4.0-1164.175","5.4.0-1165.176","5.4.0-1166.177","5.4.0-1167.178"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1117.124~20.04.1"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1","5.15.0-1040.45~20.04.1","5.15.0-1041.46~20.04.1","5.15.0-1043.48~20.04.1","5.15.0-1044.49~20.04.1","5.15.0-1045.50~20.04.1","5.15.0-1047.52~20.04.1","5.15.0-1048.53~20.04.1","5.15.0-1049.54~20.04.1","5.15.0-1050.55~20.04.1","5.15.0-1051.56~20.04.1","5.15.0-1052.57~20.04.1","5.15.0-1053.58~20.04.1","5.15.0-1055.60~20.04.1","5.15.0-1056.61~20.04.1","5.15.0-1057.63~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1075.82~20.04.1","5.15.0-1077.84~20.04.1","5.15.0-1080.87~20.04.1","5.15.0-1081.88~20.04.1","5.15.0-1082.89~20.04.1","5.15.0-1083.90~20.04.1","5.15.0-1084.91~20.04.1","5.15.0-1086.93~20.04.1","5.15.0-1087.94~20.04.1","5.15.0-1088.95~20.04.1","5.15.0-1089.96~20.04.1","5.15.0-1090.97~20.04.1","5.15.0-1091.98~20.04.1","5.15.0-1092.99~20.04.1","5.15.0-1093.100~20.04.1","5.15.0-1095.102~20.04.1","5.15.0-1096.103~20.04.1","5.15.0-1097.104~20.04.1","5.15.0-1098.105~20.04.1","5.15.0-1099.106~20.04.1","5.15.0-1100.107~20.04.2","5.15.0-1101.108~20.04.1","5.15.0-1103.110~20.04.1","5.15.0-1104.111~20.04.1","5.15.0-1105.112~20.04.1","5.15.0-1106.113~20.04.1","5.15.0-1108.115~20.04.1","5.15.0-1109.116~20.04.1","5.15.0-1111.118~20.04.1","5.15.0-1112.119~20.04.1","5.15.0-1114.121~20.04.1","5.15.0-1115.122~20.04.1","5.15.0-1116.123~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1006.6","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1010.10","5.4.0-1012.12","5.4.0-1016.16","5.4.0-1019.19","5.4.0-1020.20","5.4.0-1022.22","5.4.0-1023.23","5.4.0-1025.25","5.4.0-1026.26","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.38","5.4.0-1039.41","5.4.0-1040.42","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1072.75","5.4.0-1073.76","5.4.0-1074.77","5.4.0-1077.80","5.4.0-1078.81","5.4.0-1080.83","5.4.0-1083.87","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1098.104","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1103.109","5.4.0-1104.110","5.4.0-1105.111","5.4.0-1106.112","5.4.0-1107.113","5.4.0-1108.114","5.4.0-1109.115","5.4.0-1110.116","5.4.0-1111.117","5.4.0-1112.118","5.4.0-1113.119","5.4.0-1114.120","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1122.129","5.4.0-1123.130","5.4.0-1124.131","5.4.0-1126.133","5.4.0-1127.134","5.4.0-1128.135","5.4.0-1129.136","5.4.0-1130.137","5.4.0-1131.138","5.4.0-1132.139","5.4.0-1133.140","5.4.0-1134.141","5.4.0-1135.142","5.4.0-1136.143","5.4.0-1137.144","5.4.0-1138.145","5.4.0-1139.146","5.4.0-1140.147","5.4.0-1142.149","5.4.0-1143.150","5.4.0-1145.152","5.4.0-1147.154","5.4.0-1148.155","5.4.0-1149.156","5.4.0-1150.157","5.4.0-1151.158","5.4.0-1152.159","5.4.0-1153.160","5.4.0-1154.161","5.4.0-1156.163","5.4.0-1157.164","5.4.0-1160.166","5.4.0-1161.167","5.4.0-1162.168","5.4.0-1163.169","5.4.0-1164.170","5.4.0-1166.172","5.4.0-1167.173","5.4.0-1168.174","5.4.0-1169.175","5.4.0-1170.176","5.4.0-1171.177","5.4.0-1172.178"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1123.132~20.04.1"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1","5.15.0-1042.49~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1056.64~20.04.1","5.15.0-1057.65~20.04.1","5.15.0-1058.66~20.04.2","5.15.0-1059.67~20.04.1","5.15.0-1060.69~20.04.1","5.15.0-1061.70~20.04.1","5.15.0-1063.72~20.04.1","5.15.0-1064.73~20.04.1","5.15.0-1065.74~20.04.1","5.15.0-1067.76~20.04.1","5.15.0-1068.77~20.04.1","5.15.0-1070.79~20.04.1","5.15.0-1071.80~20.04.1","5.15.0-1072.81~20.04.1","5.15.0-1073.82~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1079.88~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1082.91~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.1","5.15.0-1088.97~20.04.1","5.15.0-1089.98~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1094.103~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1102.111~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1110.119~20.04.1","5.15.0-1111.120~20.04.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1122.131~20.04.1"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.10","5.4.0-1011.14","5.4.0-1012.15","5.4.0-1013.16","5.4.0-1016.19","5.4.0-1019.22","5.4.0-1020.23","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1040.44","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1049.55","5.4.0-1050.56","5.4.0-1054.60","5.4.0-1058.64","5.4.0-1059.65","5.4.0-1060.66","5.4.0-1062.68","5.4.0-1064.70","5.4.0-1065.71","5.4.0-1066.72","5.4.0-1068.74","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1072.78","5.4.0-1073.79","5.4.0-1074.80","5.4.0-1075.81","5.4.0-1076.82","5.4.0-1077.83","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1082.89","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1088.95","5.4.0-1089.96","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1092.99","5.4.0-1093.100","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1123.130","5.4.0-1125.132","5.4.0-1126.133"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1004.4","5.3.0-1009.10","5.3.0-1011.12","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1033.35","5.4.0-1034.37","5.4.0-1036.39","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1040.43","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1044.47","5.4.0-1046.49","5.4.0-1049.53","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1060.64","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.94","5.4.0-1087.95","5.4.0-1089.97","5.4.0-1090.98","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1096.105","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1128.137","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1142.151","5.4.0-1143.152","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163","5.4.0-1155.164","5.4.0-1156.165","5.4.0-1157.166","5.4.0-1159.168","5.4.0-1160.169","5.4.0-1161.170","5.4.0-1162.171","5.4.0-1163.172","5.4.0-1164.173","5.4.0-1165.174","5.4.0-1166.175","5.4.0-1167.177","5.4.0-1168.178","5.4.0-1169.179","5.4.0-1170.180"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1118.128~20.04.1"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1","5.15.0-1038.46~20.04.1","5.15.0-1039.47~20.04.1","5.15.0-1040.48~20.04.1","5.15.0-1041.49~20.04.1","5.15.0-1042.50~20.04.1","5.15.0-1044.52~20.04.1","5.15.0-1045.53~20.04.2","5.15.0-1046.54~20.04.1","5.15.0-1047.55~20.04.1","5.15.0-1048.56~20.04.1","5.15.0-1049.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1055.63~20.04.1","5.15.0-1058.66~20.04.1","5.15.0-1059.67~20.04.1","5.15.0-1060.68~20.04.1","5.15.0-1062.70~20.04.1","5.15.0-1065.73~20.04.1","5.15.0-1066.74~20.04.1","5.15.0-1067.75~20.04.1","5.15.0-1068.76~20.04.1","5.15.0-1069.77~20.04.1","5.15.0-1070.78~20.04.1","5.15.0-1071.79~20.04.1","5.15.0-1072.80~20.04.1","5.15.0-1073.81~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1077.86~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1083.92~20.04.1","5.15.0-1085.94~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.2","5.15.0-1088.97~20.04.1","5.15.0-1090.99~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1092.101~20.04.1","5.15.0-1093.102~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1099.108~20.04.1","5.15.0-1100.109~20.04.1","5.15.0-1101.110~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1104.113~20.04.1","5.15.0-1106.115~20.04.1","5.15.0-1108.117~20.04.1","5.15.0-1109.118~20.04.1","5.15.0-1111.121~20.04.1","5.15.0-1112.122~20.04.1","5.15.0-1114.124~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.37~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1044.51~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1048.55~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.58~20.04.1","5.15.0-1052.59~20.04.1","5.15.0-1053.60~20.04.1","5.15.0-1054.61~20.04.1","5.15.0-1055.62~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-198.208~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.86~20.04.2","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.96~20.04.1","5.15.0-87.97~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-130.140~20.04.1","5.15.0-131.141~20.04.1","5.15.0-134.145~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-151.161~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.3","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-176.186~20.04.1","5.15.0-177.187~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-185.195~20.04.1","5.15.0-186.196~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1003.4","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1006.7","5.4.0-1007.8","5.4.0-1008.9","5.4.0-1010.11","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1017.19","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1020.22","5.4.0-1021.23","5.4.0-1023.25","5.4.0-1026.29","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1036.41","5.4.0-1037.42","5.4.0-1040.45","5.4.0-1041.46","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1049.54","5.4.0-1050.55","5.4.0-1051.56","5.4.0-1052.57","5.4.0-1053.58","5.4.0-1054.59","5.4.0-1056.61","5.4.0-1057.62","5.4.0-1058.63","5.4.0-1059.64","5.4.0-1060.65","5.4.0-1061.66","5.4.0-1063.68","5.4.0-1064.69","5.4.0-1065.70","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1068.73","5.4.0-1069.74","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1077.82","5.4.0-1078.83","5.4.0-1079.84","5.4.0-1080.85","5.4.0-1081.86","5.4.0-1082.87","5.4.0-1083.88","5.4.0-1084.89","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1088.93","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1092.97","5.4.0-1093.98","5.4.0-1094.99","5.4.0-1095.100","5.4.0-1096.101","5.4.0-1097.102","5.4.0-1098.103","5.4.0-1099.104","5.4.0-1100.105","5.4.0-1102.107","5.4.0-1103.108","5.4.0-1104.109","5.4.0-1105.110","5.4.0-1107.112","5.4.0-1108.113","5.4.0-1109.114","5.4.0-1111.116","5.4.0-1112.117","5.4.0-1113.118"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1111.115~20.04.1"}]}],"versions":["5.15.0-1033.36~20.04.1","5.15.0-1034.37~20.04.1","5.15.0-1035.38~20.04.1","5.15.0-1036.39~20.04.1","5.15.0-1037.40~20.04.1","5.15.0-1038.41~20.04.1","5.15.0-1040.43~20.04.1","5.15.0-1041.44~20.04.1","5.15.0-1042.45~20.04.1","5.15.0-1043.46~20.04.1","5.15.0-1044.47~20.04.1","5.15.0-1045.48~20.04.1","5.15.0-1046.49~20.04.1","5.15.0-1047.50~20.04.1","5.15.0-1048.51~20.04.1","5.15.0-1049.52~20.04.1","5.15.0-1050.53~20.04.1","5.15.0-1053.56~20.04.1","5.15.0-1054.57~20.04.1","5.15.0-1055.58~20.04.1","5.15.0-1057.60~20.04.1","5.15.0-1058.61~20.04.1","5.15.0-1059.62~20.04.1","5.15.0-1060.63~20.04.1","5.15.0-1061.64~20.04.1","5.15.0-1062.65~20.04.1","5.15.0-1063.66~20.04.1","5.15.0-1064.67~20.04.1","5.15.0-1065.68~20.04.1","5.15.0-1066.69~20.04.1","5.15.0-1067.70~20.04.1","5.15.0-1068.71~20.04.1","5.15.0-1069.72~20.04.1","5.15.0-1074.77~20.04.1","5.15.0-1075.78~20.04.1","5.15.0-1076.79~20.04.1","5.15.0-1078.81~20.04.1","5.15.0-1079.82~20.04.1","5.15.0-1080.83~20.04.1","5.15.0-1081.84~20.04.1","5.15.0-1083.86~20.04.1","5.15.0-1085.88~20.04.1","5.15.0-1086.89~20.04.1","5.15.0-1087.90~20.04.1","5.15.0-1089.92~20.04.1","5.15.0-1090.93~20.04.1","5.15.0-1091.94~20.04.1","5.15.0-1092.95~20.04.1","5.15.0-1093.96~20.04.1","5.15.0-1094.97~20.04.1","5.15.0-1095.98~20.04.1","5.15.0-1097.100~20.04.1","5.15.0-1098.101~20.04.1","5.15.0-1099.102~20.04.1","5.15.0-1100.103~20.04.1","5.15.0-1102.105~20.04.1","5.15.0-1103.106~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1112.118~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.49~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1060.66~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.2","5.15.0-1074.80~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.1","5.15.0-1086.92~20.04.1","5.15.0-1087.93~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1099.105~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1103.109~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1107.113~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-iot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.3","5.4.0-1004.6","5.4.0-1005.7","5.4.0-1006.8","5.4.0-1009.11","5.4.0-1010.12","5.4.0-1011.13","5.4.0-1012.14","5.4.0-1013.15","5.4.0-1014.16","5.4.0-1017.18","5.4.0-1018.19","5.4.0-1019.20","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1042.43","5.4.0-1043.44","5.4.0-1044.45","5.4.0-1045.46","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1071.74"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1004.4","5.4.0-1006.6","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1023.23","5.4.0-1024.24","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1044.46","5.4.0-1045.47","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1050.52","5.4.0-1051.53","5.4.0-1053.55","5.4.0-1054.56","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1068.72","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1082.88","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.92","5.4.0-1087.93","5.4.0-1088.94","5.4.0-1089.95","5.4.0-1090.96","5.4.0-1091.97","5.4.0-1092.98","5.4.0-1093.99","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1096.102","5.4.0-1097.103","5.4.0-1098.104","5.4.0-1099.105","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1102.108","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1113.120","5.4.0-1114.121","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.127","5.4.0-1120.128","5.4.0-1121.129","5.4.0-1122.130","5.4.0-1123.131","5.4.0-1124.132","5.4.0-1125.133","5.4.0-1126.134","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1143.152","5.4.0-1144.153","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-195.205~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.88~20.04.1","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.95~20.04.1","5.15.0-87.96~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-110.120~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-128.138~20.04.1","5.15.0-129.139~20.04.1","5.15.0-131.141~20.04.1","5.15.0-133.143~20.04.1","5.15.0-134.145~20.04.1","5.15.0-135.146~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-140.150~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.1","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-174.184~20.04.1","5.15.0-175.185~20.04.1","5.15.0-177.187~20.04.1","5.15.0-178.188~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-183.193~20.04.1","5.15.0-184.194~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-nvidia-tegra-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1070.72~20.04.1"}]}],"versions":["5.15.0-1009.9~20.04.1","5.15.0-1010.10~20.04.1","5.15.0-1012.12~20.04.1","5.15.0-1014.14~20.04.1","5.15.0-1015.15~20.04.1","5.15.0-1016.16~20.04.1","5.15.0-1017.17~20.04.1","5.15.0-1018.18~20.04.1","5.15.0-1019.19~20.04.1","5.15.0-1020.20~20.04.1","5.15.0-1022.22~20.04.1","5.15.0-1025.25~20.04.1","5.15.0-1027.27~20.04.1","5.15.0-1030.30~20.04.1","5.15.0-1032.32~20.04.1","5.15.0-1039.39~20.04.1","5.15.0-1040.40~20.04.1","5.15.0-1041.41~20.04.1","5.15.0-1042.42~20.04.1","5.15.0-1043.43~20.04.1","5.15.0-1044.44~20.04.1","5.15.0-1045.45~20.04.1","5.15.0-1046.46~20.04.1","5.15.0-1047.47~20.04.1","5.15.0-1048.48~20.04.1","5.15.0-1049.49~20.04.1","5.15.0-1050.50~20.04.1","5.15.0-1051.51~20.04.1","5.15.0-1052.52~20.04.2","5.15.0-1053.53~20.04.1","5.15.0-1055.55~20.04.1","5.15.0-1057.57~20.04.1","5.15.0-1058.58~20.04.1","5.15.0-1060.60~20.04.1","5.15.0-1061.61~20.04.1","5.15.0-1063.63~20.04.1","5.15.0-1064.66~20.04.1","5.15.0-1065.67~20.04.1","5.15.0-1066.68~20.04.1","5.15.0-1067.69~20.04.1","5.15.0-1068.70~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1002.2","5.3.0-1007.8","5.3.0-1008.9","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1034.36","5.4.0-1035.38","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1039.42","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1069.75","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1073.79","5.4.0-1076.83","5.4.0-1078.86","5.4.0-1079.87","5.4.0-1081.89","5.4.0-1082.90","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1090.99","5.4.0-1091.100","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1094.103","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1099.108","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1119.128","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1140.150","5.4.0-1141.151","5.4.0-1142.152","5.4.0-1143.153","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1154.164","5.4.0-1155.165","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.171","5.4.0-1162.172","5.4.0-1163.173","5.4.0-1164.174","5.4.0-1165.175"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1114.120~20.04.1"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1041.47~20.04.1","5.15.0-1042.48~20.04.1","5.15.0-1044.50~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1047.53~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1053.59~20.04.1","5.15.0-1054.60~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1074.80~20.04.1","5.15.0-1075.81~20.04.1","5.15.0-1076.82~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1080.86~20.04.1","5.15.0-1081.87~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.3","5.15.0-1086.92~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1097.103~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1102.108~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.7","5.4.0-1008.8","5.4.0-1011.11","5.4.0-1012.12","5.4.0-1013.13","5.4.0-1015.15","5.4.0-1016.17","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1029.32","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1033.36","5.4.0-1034.37","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1038.41","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1050.56","5.4.0-1052.58","5.4.0-1053.60","5.4.0-1055.62","5.4.0-1056.63","5.4.0-1058.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1062.70","5.4.0-1065.75","5.4.0-1066.76","5.4.0-1068.78","5.4.0-1069.79","5.4.0-1070.80","5.4.0-1071.81","5.4.0-1073.84","5.4.0-1074.85","5.4.0-1077.88","5.4.0-1078.89","5.4.0-1079.90","5.4.0-1080.91","5.4.0-1081.92","5.4.0-1082.93","5.4.0-1083.94","5.4.0-1084.95","5.4.0-1085.96","5.4.0-1086.97","5.4.0-1088.99","5.4.0-1089.100","5.4.0-1090.101","5.4.0-1091.102","5.4.0-1092.103","5.4.0-1093.104","5.4.0-1094.105","5.4.0-1095.106","5.4.0-1096.107","5.4.0-1097.109","5.4.0-1098.110","5.4.0-1100.112","5.4.0-1101.113","5.4.0-1102.114","5.4.0-1103.115","5.4.0-1104.116","5.4.0-1105.117","5.4.0-1106.118","5.4.0-1107.119","5.4.0-1108.120","5.4.0-1109.121","5.4.0-1110.122","5.4.0-1111.123","5.4.0-1112.124","5.4.0-1113.125","5.4.0-1114.126","5.4.0-1115.127","5.4.0-1116.128","5.4.0-1117.129","5.4.0-1118.130","5.4.0-1119.131","5.4.0-1120.132","5.4.0-1121.133","5.4.0-1122.134","5.4.0-1129.142","5.4.0-1130.143","5.4.0-1131.144","5.4.0-1132.145","5.4.0-1133.146","5.4.0-1134.147","5.4.0-1135.148","5.4.0-1136.149","5.4.0-1137.150","5.4.0-1139.152","5.4.0-1140.153","5.4.0-1143.156","5.4.0-1144.157","5.4.0-1145.158","5.4.0-1146.159","5.4.0-1147.160","5.4.0-1148.161","5.4.0-1149.162"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-riscv-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1111.115~20.04.1"}]}],"versions":["5.15.0-1015.17~20.04.1","5.15.0-1017.19~20.04.1","5.15.0-1018.21~20.04.1","5.15.0-1019.22~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1029.33~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1032.36~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.2","5.15.0-1037.41~20.04.2","5.15.0-1038.42~20.04.2","5.15.0-1039.43~20.04.2","5.15.0-1040.44~20.04.3","5.15.0-1041.45~20.04.1","5.15.0-1043.47~20.04.1","5.15.0-1044.48~20.04.1","5.15.0-1045.49~20.04.1","5.15.0-1046.50~20.04.1","5.15.0-1047.51~20.04.1","5.15.0-1048.52~20.04.1","5.15.0-1049.53~20.04.2","5.15.0-1050.54~20.04.1","5.15.0-1051.55~20.04.1","5.15.0-1052.56~20.04.1","5.15.0-1053.57~20.04.1","5.15.0-1056.60~20.04.1","5.15.0-1057.61~20.04.1","5.15.0-1058.62~20.04.1","5.15.0-1059.63~20.04.1","5.15.0-1060.64~20.04.1","5.15.0-1061.65~20.04.1","5.15.0-1062.66~20.04.1","5.15.0-1063.67~20.04.1","5.15.0-1064.68~20.04.1","5.15.0-1065.69~20.04.1","5.15.0-1066.70~20.04.1","5.15.0-1067.71~20.04.1","5.15.0-1068.72~20.04.1","5.15.0-1069.73~20.04.1","5.15.0-1070.74~20.04.1","5.15.0-1071.75~20.04.1","5.15.0-1072.76~20.04.1","5.15.0-1073.77~20.04.1","5.15.0-1074.78~20.04.1","5.15.0-1075.79~20.04.1","5.15.0-1076.80~20.04.1","5.15.0-1077.81~20.04.1","5.15.0-1078.82~20.04.1","5.15.0-1079.83~20.04.1","5.15.0-1081.85~20.04.1","5.15.0-1082.86~20.04.1","5.15.0-1083.87~20.04.1","5.15.0-1084.88~20.04.1","5.15.0-1085.89~20.04.1","5.15.0-1086.90~20.04.1","5.15.0-1087.91~20.04.1","5.15.0-1088.92~20.04.1","5.15.0-1090.94~20.04.1","5.15.0-1091.95~20.04.1","5.15.0-1092.96~20.04.1","5.15.0-1093.97~20.04.2","5.15.0-1094.98~20.04.1","5.15.0-1095.99~20.04.1","5.15.0-1096.100~20.04.1","5.15.0-1097.101~20.04.1","5.15.0-1098.102~20.04.1","5.15.0-1099.103~20.04.1","5.15.0-1100.104~20.04.1","5.15.0-1102.106~20.04.1","5.15.0-1103.107~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.24","5.4.0-1021.25","5.4.0-1022.26","5.4.0-1023.27","5.4.0-1024.28","5.4.0-1025.29","5.4.0-1026.30","5.4.0-1027.31","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1030.34","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1035.39","5.4.0-1036.40","5.4.0-1037.41","5.4.0-1038.42","5.4.0-1039.43","5.4.0-1040.44","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.51","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1050.54","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1058.62","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1082.86","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips2","5.4.0-1069.73+fips2","5.4.0-1071.76+fips1","5.4.0-1072.77+fips1","5.4.0-1073.78+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1083.90+fips1","5.4.0-1085.92+fips1","5.4.0-1086.93+fips1","5.4.0-1088.96+fips1","5.4.0-1089.97+fips1","5.4.0-1092.100+fips1","5.4.0-1093.101+fips1","5.4.0-1094.102+fips1","5.4.0-1096.104+fips1","5.4.0-1099.107+fips1","5.4.0-1100.108+fips1","5.4.0-1101.109+fips1","5.4.0-1102.110+fips1","5.4.0-1103.111+fips1","5.4.0-1104.112+fips1","5.4.0-1105.113+fips1","5.4.0-1106.114+fips1","5.4.0-1107.115+fips1","5.4.0-1108.116+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.123+fips1","5.4.0-1114.124+fips1","5.4.0-1116.126+fips1","5.4.0-1117.127+fips1","5.4.0-1118.128+fips1","5.4.0-1119.129+fips1","5.4.0-1120.130+fips1","5.4.0-1121.131+fips1","5.4.0-1122.132+fips1","5.4.0-1123.133+fips1","5.4.0-1124.134+fips1","5.4.0-1125.135+fips1","5.4.0-1126.136+fips2","5.4.0-1127.137+fips1","5.4.0-1128.138+fips1","5.4.0-1129.139+fips1","5.4.0-1130.140+fips1","5.4.0-1131.141+fips1","5.4.0-1132.142+fips1","5.4.0-1133.143+fips1","5.4.0-1134.144+fips1","5.4.0-1135.145+fips1","5.4.0-1136.146+fips1","5.4.0-1137.147+fips1","5.4.0-1139.149+fips1","5.4.0-1140.151+fips1","5.4.0-1142.153+fips1","5.4.0-1144.155+fips1","5.4.0-1145.156+fips1","5.4.0-1146.156+fips1","5.4.0-1147.157+fips1","5.4.0-1148.158+fips1","5.4.0-1149.159+fips1","5.4.0-1150.160+fips1","5.4.0-1151.161+fips1","5.4.0-1152.162+fips1","5.4.0-1153.163+fips1","5.4.0-1154.164+fips1","5.4.0-1155.165+fips1","5.4.0-1156.166+fips1","5.4.0-1157.167+fips1","5.4.0-1158.168+fips1","5.4.0-1159.169+fips1","5.4.0-1160.170+fips1","5.4.0-1161.172+fips1","5.4.0-1163.174+fips1","5.4.0-1165.176+fips1","5.4.0-1166.177+fips1","5.4.0-1167.178+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1022.22+fips1","5.4.0-1073.76+fips1","5.4.0-1074.77+fips1","5.4.0-1076.79+fips1","5.4.0-1078.81+fips1","5.4.0-1080.83+fips1","5.4.0-1083.87+fips1","5.4.0-1085.90+fips1","5.4.0-1086.91+fips1","5.4.0-1089.94+fips1","5.4.0-1090.95+fips1","5.4.0-1091.96+fips1","5.4.0-1094.100+fips1","5.4.0-1095.101+fips1","5.4.0-1098.104+fips1","5.4.0-1100.106+fips1","5.4.0-1101.107+fips1","5.4.0-1103.109+fips1","5.4.0-1104.110+fips1","5.4.0-1105.111+fips1","5.4.0-1106.112+fips1","5.4.0-1107.113+fips1","5.4.0-1108.114+fips1","5.4.0-1109.115+fips1","5.4.0-1110.116+fips1","5.4.0-1111.117+fips1","5.4.0-1112.118+fips1","5.4.0-1113.119+fips1","5.4.0-1114.120+fips1","5.4.0-1115.122+fips1","5.4.0-1116.123+fips1","5.4.0-1117.124+fips1","5.4.0-1118.125+fips1","5.4.0-1119.126+fips1","5.4.0-1121.128+fips1","5.4.0-1122.129+fips1","5.4.0-1123.130+fips1","5.4.0-1124.131+fips1","5.4.0-1126.133+fips1","5.4.0-1127.134+fips1","5.4.0-1128.135+fips1","5.4.0-1129.136+fips1","5.4.0-1130.137+fips1","5.4.0-1131.138+fips1","5.4.0-1132.139+fips1","5.4.0-1133.140+fips1","5.4.0-1134.141+fips1","5.4.0-1135.142+fips1","5.4.0-1136.143+fips1","5.4.0-1137.144+fips1","5.4.0-1138.145+fips1","5.4.0-1139.146+fips1","5.4.0-1140.147+fips1","5.4.0-1142.149+fips1","5.4.0-1143.150+fips1","5.4.0-1145.152+fips1","5.4.0-1147.154+fips1","5.4.0-1148.156+fips1","5.4.0-1149.157+fips1","5.4.0-1151.158+fips1","5.4.0-1152.159+fips1","5.4.0-1153.160+fips1","5.4.0-1154.161+fips1","5.4.0-1155.162+fips1","5.4.0-1157.164+fips1","5.4.0-1158.165+fips1","5.4.0-1160.166+fips1","5.4.0-1161.167+fips1","5.4.0-1162.168+fips1","5.4.0-1163.169+fips1","5.4.0-1164.170+fips1","5.4.0-1166.172+fips1","5.4.0-1167.173+fips1","5.4.0-1168.174+fips1","5.4.0-1170.176+fips1","5.4.0-1171.177+fips1","5.4.0-1172.178+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1026.30","5.4.0-1028.32","5.4.0-1031.36","5.4.0-1032.37","5.4.0-1033.38","5.4.0-1034.40","5.4.0-1035.41","5.4.0-1036.42","5.4.0-1037.43","5.4.0-1038.44","5.4.0-1040.46","5.4.0-1041.47","5.4.0-1042.48","5.4.0-1043.49","5.4.0-1045.51","5.4.0-1046.52","5.4.0-1047.53","5.4.0-1048.54","5.4.0-1049.55","5.4.0-1051.57","5.4.0-1054.61","5.4.0-1056.64","5.4.0-1057.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1061.69","5.4.0-1062.70","5.4.0-1064.73","5.4.0-1065.74","5.4.0-1068.77","5.4.0-1069.78","5.4.0-1070.79","5.4.0-1072.81","5.4.0-1073.82","5.4.0-1074.83","5.4.0-1075.84","5.4.0-1076.85","5.4.0-1077.86","5.4.0-1078.87","5.4.0-1079.88","5.4.0-1080.89","5.4.0-1081.90","5.4.0-1082.91","5.4.0-1083.92","5.4.0-1084.93","5.4.0-1085.94","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1088.97","5.4.0-1089.98","5.4.0-1090.100","5.4.0-1091.101","5.4.0-1092.102","5.4.0-1094.104","5.4.0-1095.105","5.4.0-1096.106","5.4.0-1097.107","5.4.0-1098.108","5.4.0-1099.109","5.4.0-1100.110","5.4.0-1101.111","5.4.0-1102.112","5.4.0-1103.113","5.4.0-1104.114","5.4.0-1105.115","5.4.0-1106.116","5.4.0-1107.117","5.4.0-1108.118","5.4.0-1109.119","5.4.0-1110.120","5.4.0-1111.121","5.4.0-1112.122","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1138.148","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1141.151"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips1","5.4.0-1067.71~20.04.1","5.4.0-1069.73+fips2","5.4.0-1071.75+fips1","5.4.0-1073.78+fips1","5.4.0-1075.80+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1086.94+fips1","5.4.0-1087.95+fips1","5.4.0-1089.97+fips1","5.4.0-1092.101+fips1","5.4.0-1093.102+fips1","5.4.0-1096.105+fips1","5.4.0-1097.106+fips1","5.4.0-1098.107+fips1","5.4.0-1100.109+fips1","5.4.0-1101.110+fips1","5.4.0-1102.111+fips1","5.4.0-1103.112+fips1","5.4.0-1104.113+fips1","5.4.0-1105.114+fips1","5.4.0-1106.115+fips1","5.4.0-1107.116+fips1","5.4.0-1108.117+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.122+fips1","5.4.0-1115.124+fips1","5.4.0-1116.125+fips1","5.4.0-1117.126+fips1","5.4.0-1118.127+fips1","5.4.0-1120.129+fips1","5.4.0-1121.130+fips1","5.4.0-1122.131+fips1","5.4.0-1124.133+fips1","5.4.0-1125.134+fips1","5.4.0-1126.135+fips1","5.4.0-1127.136+fips1","5.4.0-1128.137+fips1","5.4.0-1129.138+fips1","5.4.0-1130.139+fips1","5.4.0-1131.140+fips1","5.4.0-1132.141+fips1","5.4.0-1133.142+fips1","5.4.0-1134.143+fips1","5.4.0-1135.144+fips1","5.4.0-1136.145+fips1","5.4.0-1137.146+fips1","5.4.0-1138.147+fips1","5.4.0-1139.148+fips1","5.4.0-1140.149+fips1","5.4.0-1141.150+fips1","5.4.0-1142.151+fips1","5.4.0-1143.152+fips1","5.4.0-1145.154+fips1","5.4.0-1146.155+fips1","5.4.0-1147.156+fips1","5.4.0-1148.157+fips1","5.4.0-1149.158+fips1","5.4.0-1150.159+fips1","5.4.0-1151.160+fips1","5.4.0-1152.161+fips1","5.4.0-1153.162+fips1","5.4.0-1154.163+fips1","5.4.0-1155.164+fips1","5.4.0-1156.165+fips1","5.4.0-1157.166+fips1","5.4.0-1159.168+fips1","5.4.0-1160.169+fips1","5.4.0-1161.170+fips1","5.4.0-1162.171+fips1","5.4.0-1163.172+fips1","5.4.0-1164.173+fips1","5.4.0-1165.174+fips1","5.4.0-1166.175+fips1","5.4.0-1167.176+fips1","5.4.0-1168.178+fips1","5.4.0-1169.179+fips1","5.4.0-1170.180+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1022.22+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-198.208"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.86","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.96","5.15.0-87.97","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-112.122","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-130.140","5.15.0-131.141","5.15.0-133.144","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-151.161","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-176.186","5.15.0-177.187","5.15.0-179.189","5.15.0-181.191","5.15.0-185.195","5.15.0-186.196","5.15.0-187.197","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1117.124"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1055.60","5.15.0-1056.61","5.15.0-1057.63","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1076.83","5.15.0-1078.85","5.15.0-1079.86","5.15.0-1080.87","5.15.0-1081.88","5.15.0-1082.89","5.15.0-1083.90","5.15.0-1084.91","5.15.0-1085.92","5.15.0-1086.93","5.15.0-1087.94","5.15.0-1088.95","5.15.0-1089.96","5.15.0-1090.97","5.15.0-1091.98","5.15.0-1092.99","5.15.0-1093.100","5.15.0-1095.102","5.15.0-1096.103","5.15.0-1097.104","5.15.0-1098.105","5.15.0-1099.106","5.15.0-1100.107","5.15.0-1101.108","5.15.0-1103.110","5.15.0-1104.111","5.15.0-1105.112","5.15.0-1106.113","5.15.0-1108.115","5.15.0-1109.116","5.15.0-1111.118","5.15.0-1112.119","5.15.0-1113.120","5.15.0-1114.121","5.15.0-1115.122","5.15.0-1116.123"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1012.12~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.2","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1022.22~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1016.17~22.04.2","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1023.25~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1035.37~22.04.1","6.8.0-1036.38~22.04.1","6.8.0-1039.41~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.44~22.04.1","6.8.0-1043.45~22.04.1","6.8.0-1044.46~22.04.1","6.8.0-1045.47~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1057.60~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.2","6.8.0-1063.66~22.04.1","6.8.0-1064.67~22.04.1","6.8.0-1065.68~22.04.1","6.8.0-1066.69~22.04.1","6.8.0-1069.74~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1123.132"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48","5.15.0-1042.49","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1056.64","5.15.0-1057.65","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.69","5.15.0-1061.70","5.15.0-1063.72","5.15.0-1064.73","5.15.0-1066.75","5.15.0-1067.76","5.15.0-1068.77","5.15.0-1070.79","5.15.0-1071.80","5.15.0-1072.81","5.15.0-1073.82","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1084.93","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1101.110","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1109.118","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1121.130","5.15.0-1122.131"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7~22.04.1","6.5.0-1009.9~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.19~22.04.2","6.5.0-1019.20~22.04.1","6.5.0-1021.22~22.04.1","6.5.0-1022.23~22.04.1","6.5.0-1023.24~22.04.1","6.5.0-1024.25~22.04.1","6.5.0-1025.26~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1012.14~22.04.1","6.8.0-1013.15~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.2","6.8.0-1017.20~22.04.1","6.8.0-1018.21~22.04.1","6.8.0-1020.23~22.04.1","6.8.0-1021.25~22.04.1","6.8.0-1025.30~22.04.1","6.8.0-1026.31~22.04.1","6.8.0-1027.32~22.04.1","6.8.0-1028.33~22.04.1","6.8.0-1029.34~22.04.1","6.8.0-1030.35~22.04.1","6.8.0-1031.36~22.04.1","6.8.0-1034.39~22.04.1","6.8.0-1036.42~22.04.1","6.8.0-1040.46~22.04.1","6.8.0-1041.47~22.04.1","6.8.0-1044.50~22.04.1","6.8.0-1051.57~22.04.1","6.8.0-1052.58~22.04.1","6.8.0-1059.65~22.04.1","6.8.0-1062.69~22.04.1","6.8.0-1063.71~22.04.1","6.8.0-1064.72~22.04.1","6.8.0-1065.73~22.04.1","6.8.0-1067.75~22.04.1","6.8.0-1068.76~22.04.1","6.8.0-1070.78~22.04.1","6.8.0-1073.82~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1122.131"}]}],"versions":["5.15.0-1019.24.1","5.15.0-1024.30.1","5.15.0-1029.36.1","5.15.0-1030.37.1","5.15.0-1031.38.1","5.15.0-1033.40.1","5.15.0-1034.41.1","5.15.0-1035.42.1","5.15.0-1036.43.1","5.15.0-1037.44.1","5.15.0-1038.45.1","5.15.0-1039.46.1","5.15.0-1041.48.1","5.15.0-1042.49.1","5.15.0-1044.51.1","5.15.0-1045.52.1","5.15.0-1046.53.1","5.15.0-1047.54.1","5.15.0-1049.56.1","5.15.0-1050.57.1","5.15.0-1051.59.1","5.15.0-1052.60.1","5.15.0-1053.61.1","5.15.0-1054.62.1","5.15.0-1056.64.1","5.15.0-1057.65.1","5.15.0-1058.66.1","5.15.0-1059.67.1","5.15.0-1060.69.1","5.15.0-1061.70.1","5.15.0-1063.72.1","5.15.0-1064.73.1","5.15.0-1065.74.1","5.15.0-1067.76.1","5.15.0-1068.77.1","5.15.0-1070.79.1","5.15.0-1071.80.1","5.15.0-1072.81.1","5.15.0-1073.82.1","5.15.0-1076.85.1","5.15.0-1078.87.1","5.15.0-1081.90.1","5.15.0-1082.91.1","5.15.0-1084.93.1","5.15.0-1086.95.1","5.15.0-1087.96.1","5.15.0-1088.97.1","5.15.0-1089.98.1","5.15.0-1090.99.1","5.15.0-1091.100.1","5.15.0-1092.101.1","5.15.0-1094.103.1","5.15.0-1095.104.1","5.15.0-1096.105.1","5.15.0-1097.106.1","5.15.0-1098.107.1","5.15.0-1102.111.1","5.15.0-1109.118.1","5.15.0-1110.119.1","5.15.0-1111.120.1","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1120.129","5.15.0-1121.130"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1041.48~22.04.1","6.8.0-1042.49~22.04.1","6.8.0-1044.51~22.04.1","6.8.0-1046.53~22.04.1","6.8.0-1053.60~22.04.1","6.8.0-1058.65~22.04.1","6.8.0-1061.68~22.04.1","6.8.0-1062.69~22.04.1","6.8.0-1063.70~22.04.1","6.8.0-1064.71~22.04.1","6.8.0-1065.72~22.04.1","6.8.0-1066.73~22.04.1","6.8.0-1068.75~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1118.128"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45","5.15.0-1038.46","5.15.0-1039.47","5.15.0-1040.48","5.15.0-1041.49","5.15.0-1042.50","5.15.0-1044.52","5.15.0-1045.53","5.15.0-1046.54","5.15.0-1047.55","5.15.0-1048.56","5.15.0-1049.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1055.63","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1077.86","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1080.89","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1101.110","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1106.115","5.15.0-1108.117","5.15.0-1109.118","5.15.0-1111.121","5.15.0-1112.122","5.15.0-1114.124","5.15.0-1115.125","5.15.0-1117.127"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1016.18~22.04.1","6.2.0-1017.19~22.04.1","6.2.0-1018.20~22.04.1","6.2.0-1019.21~22.04.1","6.2.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10~22.04.3","6.5.0-1011.11~22.04.1","6.5.0-1013.13~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1022.24~22.04.1","6.5.0-1023.25~22.04.1","6.5.0-1024.26~22.04.1","6.5.0-1025.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1","6.8.0-1012.13~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.1","6.8.0-1016.18~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1025.27~22.04.1","6.8.0-1026.28~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1034.36~22.04.2","6.8.0-1036.38~22.04.1","6.8.0-1037.39~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.2","6.8.0-1048.51~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1063.69~22.04.1","6.8.0-1064.72~22.04.1","6.8.0-1065.73~22.04.1","6.8.0-1066.74~22.04.1","6.8.0-1067.75~22.04.1","6.8.0-1069.77~22.04.1","6.8.0-1070.78~22.04.1","6.8.0-1073.81~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1113.119"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1104.110","5.15.0-1105.111","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1100.108"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.37","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.50","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1048.55","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.58","5.15.0-1052.59","5.15.0-1053.60","5.15.0-1054.61","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.90","5.15.0-1083.91","5.15.0-1084.92","5.15.0-1086.94","5.15.0-1087.95","5.15.0-1088.96","5.15.0-1089.97","5.15.0-1091.99","5.15.0-1092.100","5.15.0-1094.102","5.15.0-1095.103","5.15.0-1096.104","5.15.0-1097.105","5.15.0-1098.106","5.15.0-1099.107"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1","6.2.0-31.31~22.04.1","6.2.0-32.32~22.04.1","6.2.0-33.33~22.04.1","6.2.0-34.34~22.04.1","6.2.0-35.35~22.04.1","6.2.0-36.37~22.04.1","6.2.0-37.38~22.04.1","6.2.0-39.40~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14~22.04.1","6.5.0-15.15~22.04.1","6.5.0-17.17~22.04.1","6.5.0-18.18~22.04.1","6.5.0-21.21~22.04.1","6.5.0-25.25~22.04.1","6.5.0-26.26~22.04.1","6.5.0-27.28~22.04.1","6.5.0-28.29~22.04.1","6.5.0-35.35~22.04.1","6.5.0-41.41~22.04.2","6.5.0-44.44~22.04.1","6.5.0-45.45~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1","6.8.0-40.40~22.04.3","6.8.0-45.45~22.04.1","6.8.0-47.47~22.04.1","6.8.0-48.48~22.04.1","6.8.0-49.49~22.04.1","6.8.0-50.51~22.04.1","6.8.0-51.52~22.04.1","6.8.0-52.53~22.04.1","6.8.0-57.59~22.04.1","6.8.0-58.60~22.04.1","6.8.0-59.61~22.04.1","6.8.0-60.63~22.04.1","6.8.0-64.67~22.04.1","6.8.0-65.68~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-85.85~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.2","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1","6.8.0-136.136~22.04.1","6.8.0-138.138~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1111.115"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1056.59","5.15.0-1057.60","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1068.71","5.15.0-1069.72","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1081.84","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1094.97","5.15.0-1095.98","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.109","5.15.0-1106.110","5.15.0-1107.111","5.15.0-1108.112","5.15.0-1109.113","5.15.0-1110.114"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.16~22.04.1","6.8.0-1017.17~22.04.1","6.8.0-1018.18~22.04.1","6.8.0-1019.19~22.04.1","6.8.0-1023.23~22.04.1","6.8.0-1024.24~22.04.1","6.8.0-1025.25~22.04.1","6.8.0-1026.26~22.04.1","6.8.0-1027.27~22.04.1","6.8.0-1028.28~22.04.1","6.8.0-1029.29~22.04.1","6.8.0-1030.30~22.04.1","6.8.0-1033.33~22.04.1","6.8.0-1036.36~22.04.1","6.8.0-1037.37~22.04.1","6.8.0-1038.38~22.04.1","6.8.0-1039.39~22.04.1","6.8.0-1040.40~22.04.1","6.8.0-1041.41~22.04.1","6.8.0-1042.42~22.04.1","6.8.0-1043.43~22.04.1","6.8.0-1044.44~22.04.1","6.8.0-1045.45~22.04.1","6.8.0-1049.49~22.04.1","6.8.0-1050.50~22.04.1","6.8.0-1051.51~22.04.1","6.8.0-1052.52~22.04.1","6.8.0-1055.56~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1060.61~22.04.1","6.8.0-1061.62~22.04.1","6.8.0-1062.63~22.04.1","6.8.0-1063.64~22.04.1","6.8.0-1066.67~22.04.1","6.8.0-1069.70~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1112.118"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.49","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1055.61","5.15.0-1057.63","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1098.104","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1103.109","5.15.0-1104.110","5.15.0-1106.112","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1109.114"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.65","5.15.0-1061.66","5.15.0-1062.67","5.15.0-1063.68","5.15.0-1064.69","5.15.0-1065.70","5.15.0-1066.71","5.15.0-1067.72","5.15.0-1068.73","5.15.0-1069.74","5.15.0-1070.75","5.15.0-1071.76","5.15.0-1072.77","5.15.0-1073.78","5.15.0-1076.81","5.15.0-1077.82","5.15.0-1078.83","5.15.0-1079.84","5.15.0-1080.85","5.15.0-1081.86","5.15.0-1082.87","5.15.0-1083.88","5.15.0-1084.89","5.15.0-1085.90","5.15.0-1086.91","5.15.0-1087.92","5.15.0-1088.93","5.15.0-1089.94","5.15.0-1090.95","5.15.0-1091.96","5.15.0-1092.97","5.15.0-1093.98","5.15.0-1095.100","5.15.0-1096.101","5.15.0-1097.102","5.15.0-1098.103","5.15.0-1100.105","5.15.0-1101.106","5.15.0-1103.108","5.15.0-1104.109","5.15.0-1105.110","5.15.0-1106.111","5.15.0-1107.112","5.15.0-1108.113"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-195.205"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.88","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.95","5.15.0-87.96","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-110.120","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-129.139","5.15.0-131.141","5.15.0-133.143","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-145.158","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-175.185","5.15.0-177.187","5.15.0-178.188","5.15.0-179.189","5.15.0-181.191","5.15.0-183.193","5.15.0-184.194","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14.1~22.04.1","6.5.0-15.15.1.1~22.04.1","6.5.0-17.17.1.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-41.41.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-44.44.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38.1~22.04.2","6.8.0-40.40.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-45.45.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.3~22.04.1","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-54.56.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-60.63.1~22.04.1","6.8.0-62.65.1~22.04.1","6.8.0-63.66.1~22.04.1","6.8.0-64.67.1~22.04.1","6.8.0-65.68.1~22.04.1","6.8.0-78.78.1~22.04.1","6.8.0-79.79.1~22.04.1","6.8.0-83.83.1~22.04.1","6.8.0-84.84.1~22.04.1","6.8.0-85.85.1~22.04.1","6.8.0-86.87.1~22.04.1","6.8.0-87.88.1~22.04.1","6.8.0-88.89.1~22.04.1","6.8.0-90.91.1~22.04.1","6.8.0-94.96.1~22.04.1","6.8.0-100.100.1~22.04.1","6.8.0-101.101.1~22.04.1","6.8.0-106.106.1~22.04.1","6.8.0-107.107.1~22.04.1","6.8.0-110.110.1~22.04.1","6.8.0-111.111.1~22.04.1","6.8.0-117.117.1~22.04.1","6.8.0-134.134.1~22.04.1","6.8.0-136.136.2~22.04.1","6.8.0-137.137.1~22.04.1","6.8.0-138.138.1~22.04.1","6.8.0-139.139.1~22.04.1","6.8.0-142.142.1~22.04.1","6.8.0-146.146.1~22.04.1","6.8.0-149.149.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1112.113"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1037.37","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1053.54","5.15.0-1054.55","5.15.0-1055.56","5.15.0-1058.59","5.15.0-1059.60","5.15.0-1060.61","5.15.0-1061.62","5.15.0-1062.63","5.15.0-1063.64","5.15.0-1064.65","5.15.0-1065.66","5.15.0-1066.67","5.15.0-1067.68","5.15.0-1068.69","5.15.0-1069.70","5.15.0-1070.71","5.15.0-1071.72","5.15.0-1072.73","5.15.0-1073.74","5.15.0-1074.75","5.15.0-1075.76","5.15.0-1076.77","5.15.0-1077.78","5.15.0-1078.79","5.15.0-1079.80","5.15.0-1080.81","5.15.0-1081.82","5.15.0-1082.83","5.15.0-1083.84","5.15.0-1085.86","5.15.0-1086.87","5.15.0-1087.88","5.15.0-1088.89","5.15.0-1090.91","5.15.0-1091.92","5.15.0-1092.93","5.15.0-1093.94","5.15.0-1094.95","5.15.0-1095.96","5.15.0-1096.97","5.15.0-1098.99","5.15.0-1099.100","5.15.0-1100.101","5.15.0-1101.102","5.15.0-1103.104","5.15.0-1104.105","5.15.0-1106.107","5.15.0-1107.108","5.15.0-1108.109","5.15.0-1109.110","5.15.0-1110.111","5.15.0-1111.112"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1004.4","6.5.0-1007.7","6.5.0-1013.13","6.5.0-1014.14","6.5.0-1015.15","6.5.0-1018.18","6.5.0-1019.19","6.5.0-1021.22","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1022.25~22.04.2","6.8.0-1023.26~22.04.1","6.8.0-1024.27~22.04.1","6.8.0-1025.28~22.04.1","6.8.0-1026.29~22.04.1","6.8.0-1027.30~22.04.1","6.8.0-1028.31~22.04.1","6.8.0-1029.32~22.04.1","6.8.0-1030.33~22.04.1","6.8.0-1031.34~22.04.1","6.8.0-1032.35~22.04.1","6.8.0-1035.38~22.04.1","6.8.0-1036.39~22.04.1","6.8.0-1038.41~22.04.1","6.8.0-1039.42~22.04.1","6.8.0-1040.43~22.04.1","6.8.0-1041.44~22.04.2","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1049.52~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1059.62~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.1","6.8.0-1063.66~22.04.1","6.8.0-1064.67~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1070.72"}]}],"versions":["5.15.0-1009.9","5.15.0-1010.10","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1030.30","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1051.51","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1058.58","5.15.0-1060.60","5.15.0-1061.61","5.15.0-1063.63","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1068.70"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1059.59"}]}],"versions":["5.15.0-1001.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1009.9","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1023.23","5.15.0-1024.24","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1054.54","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17","6.1.0-1019.19","6.1.0-1020.20","6.1.0-1021.21","6.1.0-1022.22","6.1.0-1023.23","6.1.0-1024.24","6.1.0-1025.25","6.1.0-1026.26","6.1.0-1027.27","6.1.0-1028.28","6.1.0-1029.29","6.1.0-1033.33","6.1.0-1034.34","6.1.0-1035.35","6.1.0-1036.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1003.3","6.5.0-1004.4","6.5.0-1006.6","6.5.0-1007.7","6.5.0-1008.8","6.5.0-1009.10","6.5.0-1011.12","6.5.0-1013.14","6.5.0-1014.15","6.5.0-1015.16","6.5.0-1016.17","6.5.0-1018.19","6.5.0-1019.20","6.5.0-1020.21","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25","6.5.0-1025.26","6.5.0-1027.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1114.120"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1041.47","5.15.0-1042.48","5.15.0-1044.50","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.61","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1098.104","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1103.109","5.15.0-1105.111","5.15.0-1106.112","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1013.13~22.04.4","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1019.19~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1","6.5.0-1025.25~22.04.1","6.5.0-1026.26~22.04.1","6.5.0-1027.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.17~22.04.1","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.20~22.04.1","6.8.0-1020.21~22.04.1","6.8.0-1021.22~22.04.1","6.8.0-1022.23~22.04.1","6.8.0-1023.24~22.04.1","6.8.0-1024.25~22.04.1","6.8.0-1025.26~22.04.1","6.8.0-1026.27~22.04.1","6.8.0-1027.28~22.04.1","6.8.0-1028.29~22.04.1","6.8.0-1029.30~22.04.1","6.8.0-1030.31~22.04.1","6.8.0-1032.33~22.04.1","6.8.0-1033.34~22.04.1","6.8.0-1035.36~22.04.1","6.8.0-1037.38~22.04.1","6.8.0-1038.39~22.04.1","6.8.0-1039.40~22.04.1","6.8.0-1040.41~22.04.1","6.8.0-1041.42~22.04.1","6.8.0-1042.43~22.04.1","6.8.0-1043.44~22.04.1","6.8.0-1044.45~22.04.1","6.8.0-1047.48~22.04.1","6.8.0-1049.50~22.04.1","6.8.0-1050.51~22.04.1","6.8.0-1052.53~22.04.1","6.8.0-1054.55~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1059.62~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.1","6.8.0-1067.71~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.20","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1025.27","5.15.0-1026.28","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1029.31","5.15.0-1030.32","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1083.86","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.108","5.15.0-1106.109","5.15.0-1108.111","5.15.0-1110.113"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-17.17.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-40.40.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38.1~22.04.1","6.8.0-39.39.1~22.04.1","6.8.0-40.40.1~22.04.1","6.8.0-41.41.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.1~22.04.2","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-53.55.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-62.65~22.04.1","6.8.0-63.66~22.04.1","6.8.0-64.67~22.04.1","6.8.0-71.71~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.1","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1","6.8.0-136.136~22.04.3","6.8.0-137.137~22.04.1","6.8.0-138.138~22.04.1","6.8.0-139.139~22.04.1","6.8.0-142.142~22.04.1","6.8.0-146.146~22.04.1","6.8.0-149.149~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1006.7~22.04.1","6.2.0-1007.8~22.04.1","6.2.0-1009.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.8~22.04.1","6.5.0-1008.9~22.04.1","6.5.0-1009.10~22.04.1","6.5.0-1010.11~22.04.1","6.5.0-1011.12~22.04.1","6.5.0-1012.13~22.04.1","6.5.0-1014.15~22.04.1","6.5.0-1015.16~22.04.1","6.5.0-1016.17~22.04.1","6.5.0-1017.18~22.04.1","6.5.0-1018.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1080.84"}]}],"versions":["5.15.0-1022.26","5.15.0-1023.27","5.15.0-1025.29","5.15.0-1027.31","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.42","5.15.0-1039.43","5.15.0-1041.45","5.15.0-1044.48","5.15.0-1046.50","5.15.0-1050.54","5.15.0-1051.55","5.15.0-1052.56","5.15.0-1053.57","5.15.0-1054.58","5.15.0-1055.59","5.15.0-1056.60","5.15.0-1057.61","5.15.0-1059.63","5.15.0-1060.64","5.15.0-1061.65","5.15.0-1062.66","5.15.0-1063.67","5.15.0-1064.68","5.15.0-1065.69","5.15.0-1067.71","5.15.0-1068.72","5.15.0-1069.73","5.15.0-1070.74","5.15.0-1074.78","5.15.0-1075.79","5.15.0-1076.80","5.15.0-1077.81","5.15.0-1078.82","5.15.0-1079.83"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:22.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1101.103"}]}],"versions":["5.15.0-1011.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1017.19","5.15.0-1019.21","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1031.33","5.15.0-1032.34","5.15.0-1033.35","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1040.42","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1045.47","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1050.52","5.15.0-1051.53","5.15.0-1052.54","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1062.64","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1069.71","5.15.0-1070.72","5.15.0-1072.74","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1095.97","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1109.111"}]}],"versions":["5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1028.33","5.15.0-1033.35","5.15.0-1034.36","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1039.41","5.15.0-1040.42","5.15.0-1041.43","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1046.48","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1049.51","5.15.0-1050.52","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1055.57","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1066.68","5.15.0-1071.73","5.15.0-1072.74","5.15.0-1073.75","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1078.80","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1088.90","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1091.93","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1094.96","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105","5.15.0-1104.106","5.15.0-1105.107","5.15.0-1106.108","5.15.0-1107.109","5.15.0-1108.110"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1116.125"}]}],"versions":["5.15.0-1006.6","5.15.0-1007.7","5.15.0-1009.9","5.15.0-1011.11","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1024.25","5.15.0-1025.28","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1039.42","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.52","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1077.85","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1107.116","5.15.0-1108.117","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1112.121","5.15.0-1113.122","5.15.0-1114.123","5.15.0-1115.124"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1004.4~22.04.1","6.8.1-1005.5~22.04.2","6.8.1-1006.6~22.04.1","6.8.1-1007.7~22.04.1","6.8.1-1008.8~22.04.1","6.8.1-1009.9~22.04.1","6.8.1-1010.10~22.04.1","6.8.1-1011.11~22.04.1","6.8.1-1012.12~22.04.1","6.8.1-1013.14~22.04.1","6.8.1-1014.15~22.04.1","6.8.1-1015.16~22.04.1","6.8.1-1016.17~22.04.1","6.8.1-1017.18~22.04.1","6.8.1-1018.19~22.04.1","6.8.1-1019.20~22.04.1","6.8.1-1020.21~22.04.1","6.8.1-1021.22~22.04.1","6.8.1-1022.23~22.04.1","6.8.1-1023.24~22.04.1","6.8.1-1024.25~22.04.1","6.8.1-1025.26~22.04.1","6.8.1-1026.27~22.04.1","6.8.1-1030.31~22.04.1","6.8.1-1031.32~22.04.1","6.8.1-1034.35~22.04.1","6.8.1-1035.36~22.04.1","6.8.1-1036.37~22.04.1","6.8.1-1037.38~22.04.1","6.8.1-1038.39~22.04.1","6.8.1-1039.40~22.04.1","6.8.1-1040.41~22.04.1","6.8.1-1041.42~22.04.1","6.8.1-1042.43~22.04.1","6.8.1-1045.46~22.04.1","6.8.1-1046.47~22.04.2","6.8.1-1047.48~22.04.1","6.8.1-1048.49~22.04.1","6.8.1-1051.52~22.04.1","6.8.1-1052.53~22.04.1","6.8.1-1055.56~22.04.1","6.8.1-1056.57~22.04.2","6.8.1-1057.58~22.04.1","6.8.1-1058.59~22.04.1","6.8.1-1059.60~22.04.1","6.8.1-1060.61~22.04.1","6.8.1-1061.62~22.04.1","6.8.1-1064.65~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1042.47+fips1","5.15.0-1051.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1053.61+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1048.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1117.124+fips1"}]}],"versions":["5.15.0-1051.56+fips1","5.15.0-1052.57+fips1","5.15.0-1053.58+fips1","5.15.0-1055.60+fips1","5.15.0-1056.61+fips1","5.15.0-1057.63+fips1","5.15.0-1060.66+fips1","5.15.0-1061.67+fips1","5.15.0-1062.68+fips1","5.15.0-1063.69+fips1","5.15.0-1064.70+fips1","5.15.0-1065.71+fips1","5.15.0-1066.72+fips1","5.15.0-1067.73+fips1","5.15.0-1068.74+fips1","5.15.0-1069.75+fips1","5.15.0-1070.76+fips1","5.15.0-1071.77+fips1","5.15.0-1072.78+fips1","5.15.0-1073.79+fips1","5.15.0-1076.83+fips1","5.15.0-1077.84+fips1","5.15.0-1078.85+fips1","5.15.0-1079.86+fips1","5.15.0-1080.87+fips1","5.15.0-1081.88+fips1","5.15.0-1082.89+fips1","5.15.0-1083.90+fips1","5.15.0-1084.91+fips1","5.15.0-1085.92+fips1","5.15.0-1086.93+fips1","5.15.0-1087.94+fips1","5.15.0-1088.95+fips1","5.15.0-1089.96+fips1","5.15.0-1090.97+fips1","5.15.0-1091.98+fips1","5.15.0-1092.99+fips1","5.15.0-1093.100+fips1","5.15.0-1095.102+fips1","5.15.0-1096.103+fips1","5.15.0-1097.104+fips1","5.15.0-1098.105+fips1","5.15.0-1099.106+fips1","5.15.0-1100.107+fips1","5.15.0-1101.108+fips1","5.15.0-1103.110+fips1","5.15.0-1104.111+fips1","5.15.0-1105.112+fips1","5.15.0-1106.113+fips1","5.15.0-1108.115+fips1","5.15.0-1109.116+fips1","5.15.0-1111.118+fips1","5.15.0-1112.119+fips1","5.15.0-1113.120+fips1","5.15.0-1114.121+fips1","5.15.0-1115.122+fips1","5.15.0-1116.123+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1123.132+fips1"}]}],"versions":["5.15.0-1053.61+fips1","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.69+fips1","5.15.0-1061.70+fips1","5.15.0-1063.72+fips1","5.15.0-1064.73+fips1","5.15.0-1065.74+fips1","5.15.0-1067.76+fips1","5.15.0-1068.77+fips1","5.15.0-1070.79+fips1","5.15.0-1071.80+fips1","5.15.0-1072.81+fips1","5.15.0-1073.82+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1085.94+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1089.98+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1094.103+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1101.110+fips1","5.15.0-1102.111+fips1","5.15.0-1103.112+fips1","5.15.0-1109.118+fips1","5.15.0-1110.119+fips1","5.15.0-1111.120+fips1","5.15.0-1114.123+fips1","5.15.0-1116.125+fips1","5.15.0-1117.126+fips1","5.15.0-1118.127+fips1","5.15.0-1119.128+fips1","5.15.0-1121.130+fips1","5.15.0-1122.131+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-198.208+fips1"}]}],"versions":["5.15.0-73.80+fips1","5.15.0-92.102+fips1","5.15.0-94.104+fips1","5.15.0-97.107+fips1","5.15.0-100.110+fips1","5.15.0-101.111+fips1","5.15.0-102.112+fips1","5.15.0-105.115+fips1","5.15.0-106.116+fips1","5.15.0-107.117+fips1","5.15.0-111.121+fips1","5.15.0-113.123+fips1","5.15.0-115.125+fips1","5.15.0-117.127+fips1","5.15.0-118.128+fips1","5.15.0-119.129+fips1","5.15.0-121.131+fips1","5.15.0-122.132+fips1","5.15.0-124.134+fips1","5.15.0-125.135+fips1","5.15.0-127.137+fips1","5.15.0-128.138+fips1","5.15.0-130.140+fips1","5.15.0-131.141+fips1","5.15.0-133.144+fips1","5.15.0-134.145+fips1","5.15.0-135.146+fips1","5.15.0-136.147+fips1","5.15.0-138.148+fips1","5.15.0-139.149+fips1","5.15.0-140.150+fips1","5.15.0-141.151+fips1","5.15.0-142.152+fips1","5.15.0-143.153+fips1","5.15.0-144.157+fips1","5.15.0-145.158+fips1","5.15.0-152.162+fips1","5.15.0-153.163+fips1","5.15.0-156.166+fips1","5.15.0-157.167+fips1","5.15.0-160.170+fips1","5.15.0-161.171+fips1","5.15.0-163.173+fips1","5.15.0-164.174+fips1","5.15.0-168.178+fips1","5.15.0-170.180+fips1","5.15.0-171.181+fips1","5.15.0-173.183+fips1","5.15.0-174.184+fips1","5.15.0-176.186+fips1","5.15.0-177.187+fips1","5.15.0-179.189+fips1","5.15.0-181.191+fips1","5.15.0-185.195+fips1","5.15.0-186.196+fips1","5.15.0-190.200+fips1","5.15.0-191.201+fips1","5.15.0-194.204+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1118.128+fips1"}]}],"versions":["5.15.0-1048.56+fips1","5.15.0-1055.63+fips2","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.68+fips1","5.15.0-1062.70+fips1","5.15.0-1063.71+fips1","5.15.0-1064.72+fips1","5.15.0-1065.73+fips1","5.15.0-1066.74+fips1","5.15.0-1067.75+fips1","5.15.0-1068.76+fips1","5.15.0-1069.77+fips1","5.15.0-1070.78+fips1","5.15.0-1071.79+fips1","5.15.0-1072.80+fips1","5.15.0-1073.81+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1077.86+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1081.90+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1084.93+fips1","5.15.0-1085.94+fips1","5.15.0-1086.95+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1092.101+fips1","5.15.0-1093.102+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1099.108+fips1","5.15.0-1100.109+fips1","5.15.0-1101.110+fips1","5.15.0-1103.112+fips1","5.15.0-1104.113+fips1","5.15.0-1105.114+fips1","5.15.0-1106.115+fips1","5.15.0-1108.117+fips1","5.15.0-1109.118+fips1","5.15.0-1111.121+fips1","5.15.0-1112.122+fips1","5.15.0-1114.124+fips1","5.15.0-1115.125+fips1","5.15.0-1116.126+fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-147.147"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55","6.8.0-54.56","6.8.0-55.57","6.8.0-56.58","6.8.0-57.59","6.8.0-58.60","6.8.0-59.61","6.8.0-60.63","6.8.0-62.65","6.8.0-63.66","6.8.0-64.67","6.8.0-71.71","6.8.0-78.78","6.8.0-79.79","6.8.0-83.83","6.8.0-84.84","6.8.0-85.85","6.8.0-86.87","6.8.0-87.88","6.8.0-88.89","6.8.0-90.91","6.8.0-94.96","6.8.0-100.100","6.8.0-101.101","6.8.0-106.106","6.8.0-107.107","6.8.0-110.110","6.8.0-111.111","6.8.0-117.117","6.8.0-124.124","6.8.0-134.134","6.8.0-136.136","6.8.0-137.137","6.8.0-138.138","6.8.0-139.139","6.8.0-142.142","6.8.0-146.146"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1067.70"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1035.37","6.8.0-1036.38","6.8.0-1038.40","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.44","6.8.0-1043.45","6.8.0-1044.46","6.8.0-1045.47","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1055.58","6.8.0-1057.60","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67","6.8.0-1065.68","6.8.0-1066.69"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.2","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1019.19~24.04.1","6.17.0-1020.20~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14~24.04.1"}]}],"versions":["7.0.0-1007.7~24.04.2","7.0.0-1009.9~24.04.1","7.0.0-1010.10~24.04.1","7.0.0-1011.11~24.04.1","7.0.0-1012.12~24.04.1","7.0.0-1013.13~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25","6.8.0-1025.30","6.8.0-1026.31","6.8.0-1027.32","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1034.39","6.8.0-1038.44","6.8.0-1040.46","6.8.0-1041.47","6.8.0-1042.48","6.8.0-1044.50","6.8.0-1046.52","6.8.0-1051.57","6.8.0-1052.58","6.8.0-1054.60","6.8.0-1056.62","6.8.0-1058.64","6.8.0-1059.65","6.8.0-1062.69","6.8.0-1063.71","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1067.75","6.8.0-1068.76","6.8.0-1070.78"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1010.10~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1008.8~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.2","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1020.20~24.04.1","6.17.0-1021.21~24.04.1","6.17.0-1022.22"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17~24.04.1"}]}],"versions":["7.0.0-1008.8~24.04.2","7.0.0-1014.14~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1069.76"}]}],"versions":["6.8.0-1041.48","6.8.0-1044.51","6.8.0-1046.53","6.8.0-1053.60","6.8.0-1058.65","6.8.0-1061.68","6.8.0-1062.69","6.8.0-1063.70","6.8.0-1064.71","6.8.0-1065.72","6.8.0-1066.73","6.8.0-1068.75"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.16~24.04.1"}]}],"versions":["7.0.0-1007.7~24.04.3","7.0.0-1013.13~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1013.14","6.8.0-1014.15","6.8.0-1016.17","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1022.23","6.8.0-1025.27","6.8.0-1027.30","6.8.0-1029.32","6.8.0-1039.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3","6.14.0-1006.6","6.14.0-1007.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1034.36","6.8.0-1036.38","6.8.0-1037.39","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1048.51","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1060.63","6.8.0-1063.69","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1066.74","6.8.0-1067.75","6.8.0-1069.77","6.8.0-1070.78"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1014.15~24.04.1","6.14.0-1015.16~24.04.1","6.14.0-1016.17~24.04.1","6.14.0-1017.18~24.04.1","6.14.0-1018.19~24.04.1","6.14.0-1019.20~24.04.1","6.14.0-1020.21~24.04.1","6.14.0-1021.22~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.3","6.17.0-1008.8~24.04.1","6.17.0-1009.9~24.04.3","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1016.17~24.04.1","6.17.0-1018.19~24.04.1","6.17.0-1020.22~24.04.1","6.17.0-1021.24~24.04.1","6.17.0-1022.25"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.2","7.0.0-1011.11~24.04.1","7.0.0-1013.13~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1066.74"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1021.25","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1024.28","6.8.0-1025.29","6.8.0-1026.30","6.8.0-1027.31","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1032.36","6.8.0-1033.37","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1037.41","6.8.0-1038.43","6.8.0-1039.44","6.8.0-1040.45","6.8.0-1041.46","6.8.0-1042.47","6.8.0-1043.48","6.8.0-1044.49","6.8.0-1048.53","6.8.0-1049.54","6.8.0-1050.56","6.8.0-1051.57","6.8.0-1054.60","6.8.0-1055.61","6.8.0-1058.64","6.8.0-1059.67","6.8.0-1060.68","6.8.0-1061.69","6.8.0-1062.70","6.8.0-1064.72","6.8.0-1065.73"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1052.56"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6","6.8.0-1006.8","6.8.0-1007.9","6.8.0-1008.10","6.8.0-1009.11","6.8.0-1010.12","6.8.0-1011.13","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1022.24","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1037.40","6.8.0-1038.41","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1045.48","6.8.0-1046.50","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1049.53","6.8.0-1050.54","6.8.0-1051.55"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-24.24~24.04.3","6.14.0-27.27~24.04.1","6.14.0-28.28~24.04.1","6.14.0-29.29~24.04.1","6.14.0-32.32~24.04.1","6.14.0-33.33~24.04.1","6.14.0-34.34~24.04.1","6.14.0-35.35~24.04.1","6.14.0-36.36~24.04.1","6.14.0-37.37~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14~24.04.1","6.17.0-19.19~24.04.2","6.17.0-20.20~24.04.1","6.17.0-22.22~24.04.1","6.17.0-23.23~24.04.1","6.17.0-29.29~24.04.1","6.17.0-35.35~24.04.1","6.17.0-40.40~24.04.1","6.17.0-41.41~24.04.1","6.17.0-42.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38~24.04.4"}]}],"versions":["7.0.0-14.14~24.04.3","7.0.0-28.28~24.04.1","7.0.0-29.29~24.04.2","7.0.0-30.30~24.04.1","7.0.0-31.31~24.04.1","7.0.0-34.34~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1067.68"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1033.33","6.8.0-1036.36","6.8.0-1037.37","6.8.0-1038.38","6.8.0-1039.39","6.8.0-1040.40","6.8.0-1041.41","6.8.0-1042.42","6.8.0-1043.43","6.8.0-1044.44","6.8.0-1045.45","6.8.0-1049.49","6.8.0-1050.50","6.8.0-1051.51","6.8.0-1052.52","6.8.0-1055.56","6.8.0-1057.58","6.8.0-1060.61","6.8.0-1061.62","6.8.0-1062.63","6.8.0-1063.64","6.8.0-1064.65","6.8.0-1065.66","6.8.0-1066.67"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-147.147.1"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2","6.8.0-54.56.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1","6.8.0-62.65.1","6.8.0-63.66.1","6.8.0-64.67.1","6.8.0-65.68.1","6.8.0-78.78.1","6.8.0-79.79.1","6.8.0-83.83.1","6.8.0-84.84.1","6.8.0-85.85.1","6.8.0-86.87.1","6.8.0-87.88.1","6.8.0-88.89.1","6.8.0-90.91.1","6.8.0-94.96.1","6.8.0-100.100.1","6.8.0-101.101.1","6.8.0-106.106.1","6.8.0-107.107.1","6.8.0-110.110.1","6.8.0-111.111.1","6.8.0-117.117.1","6.8.0-134.134.1","6.8.0-136.136.2","6.8.0-137.137.1","6.8.0-138.138.1","6.8.0-139.139.1","6.8.0-142.142.1","6.8.0-146.146.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1022.25","6.8.0-1023.26","6.8.0-1024.27","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1032.35","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1038.41","6.8.0-1039.42","6.8.0-1040.43","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1049.52","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1059.62","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67","6.8.0-1067.70"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1002.2","6.11.0-1003.3","6.11.0-1007.7","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4","6.17.0-1008.8","6.17.0-1014.14","6.17.0-1018.18","6.17.0-1021.21","6.17.0-1026.26","6.17.0-1029.29","6.17.0-1031.31","6.17.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1024.25~24.04.1"}]}],"versions":["7.0.0-1013.13~24.04.1","7.0.0-1015.15~24.04.1","7.0.0-1016.16~24.04.1","7.0.0-1018.18~24.04.1","7.0.0-1019.19~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1009.9.1","6.8.0-1011.11.1","6.8.0-1012.12.1","6.8.0-1013.14.1","6.8.0-1014.15.1","6.8.0-1015.16.1","6.8.0-1017.19.1","6.8.0-1018.20.1","6.8.0-1019.21.1","6.8.0-1020.22.1","6.8.0-1021.23.1","6.8.0-1022.25.2","6.8.0-1023.26.1","6.8.0-1024.27.1","6.8.0-1025.28.1","6.8.0-1026.29.1","6.8.0-1027.30.1","6.8.0-1028.31.1","6.8.0-1029.32.1","6.8.0-1030.33.1","6.8.0-1031.34.1","6.8.0-1032.35.1","6.8.0-1035.38.1","6.8.0-1036.39.1","6.8.0-1038.41.1","6.8.0-1039.42.1","6.8.0-1040.43.1","6.8.0-1041.44.1","6.8.0-1042.45.1","6.8.0-1043.46.1","6.8.0-1044.47.1","6.8.0-1045.48.1","6.8.0-1046.49.1","6.8.0-1047.50.1","6.8.0-1049.52.1","6.8.0-1050.53.1","6.8.0-1051.54.1","6.8.0-1052.55.1","6.8.0-1054.57.1","6.8.0-1055.58.1","6.8.0-1058.61.1","6.8.0-1059.62.1","6.8.0-1060.63.1","6.8.0-1061.64.1","6.8.0-1062.65.1","6.8.0-1063.66.1","6.8.0-1064.67.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1036.39"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1031.32","6.8.0-1032.34","6.8.0-1035.38"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1007.7","6.11.0-1008.8","6.11.0-1009.9","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1015.15","6.11.0-1016.16","6.11.0-1017.17","6.11.0-1018.18","6.11.0-1020.20","6.11.0-1021.21","6.11.0-1022.22","6.11.0-1023.23","6.11.0-1024.24","6.11.0-1025.25","6.11.0-1027.27"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1004.4","6.14.0-1005.5","6.14.0-1006.6","6.14.0-1007.7","6.14.0-1008.8","6.14.0-1010.10","6.14.0-1011.11","6.14.0-1012.12","6.14.0-1013.13","6.14.0-1014.14","6.14.0-1015.15","6.14.0-1016.16","6.14.0-1017.17","6.14.0-1018.18","6.14.0-1019.19","6.14.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1008.8","6.17.0-1009.9","6.17.0-1010.10","6.17.0-1011.11","6.17.0-1012.12","6.17.0-1017.17","6.17.0-1020.20","6.17.0-1023.23","6.17.0-1024.24","6.17.0-1025.25","6.17.0-1028.28","6.17.0-1030.30","6.17.0-1032.32","6.17.0-1033.33"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1031.31","6.8.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.67"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1025.26","6.8.0-1026.27","6.8.0-1027.28","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1035.36","6.8.0-1037.38","6.8.0-1038.39","6.8.0-1039.40","6.8.0-1040.41","6.8.0-1041.42","6.8.0-1042.43","6.8.0-1043.44","6.8.0-1044.45","6.8.0-1047.48","6.8.0-1049.50","6.8.0-1050.51","6.8.0-1052.53","6.8.0-1054.55","6.8.0-1057.58","6.8.0-1058.61","6.8.0-1059.62","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.1","6.17.0-1014.14~24.04.1","6.17.0-1016.16~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1019.19~24.04.3","6.17.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.3","7.0.0-1011.11~24.04.1","7.0.0-1012.12~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1024.28","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1030.34","6.8.0-1031.35","6.8.0-1032.36","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1038.42","6.8.0-1039.43","6.8.0-1040.44","6.8.0-1041.45","6.8.0-1042.46","6.8.0-1043.47","6.8.0-1044.48","6.8.0-1045.49","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1050.54","6.8.0-1051.55","6.8.0-1052.56","6.8.0-1053.57","6.8.0-1056.60","6.8.0-1057.61","6.8.0-1060.64","6.8.0-1061.65","6.8.0-1062.66","6.8.0-1063.67","6.8.0-1064.68","6.8.0-1065.69","6.8.0-1068.72"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-22.22.1~24.04.1","6.14.0-23.23.1~24.04.1","6.14.0-24.24.1~24.04.1","6.14.0-27.27.1~24.04.1","6.14.0-28.28.1~24.04.1","6.14.0-29.29.1~24.04.1","6.14.0-32.32.1~24.04.1","6.14.0-33.33.1~24.04.1","6.14.0-34.34.1~24.04.1","6.14.0-35.35.1~24.04.1","6.14.0-36.36.1~24.04.1","6.14.0-37.37.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14.1~24.04.1","6.17.0-19.19.1~24.04.1","6.17.0-20.20.1~24.04.1","6.17.0-22.22.1~24.04.1","6.17.0-23.23.1~24.04.1","6.17.0-29.29.1~24.04.1","6.17.0-35.35.1~24.04.1","6.17.0-38.38.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38.1~24.04.1"}]}],"versions":["7.0.0-27.27.1~24.04.2","7.0.0-28.28.1~24.04.3","7.0.0-30.30.1~24.04.1","7.0.0-31.31.1~24.04.1","7.0.0-34.34.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1008.8"}]}],"versions":["6.8.0-1005.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-xilinx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.9","6.8.0-1009.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1034.35","6.8.0-1035.36","6.8.0-1036.37"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:24.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1033.38"}]}],"versions":["6.8.0-1011.15","6.8.0-1012.16","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1026.30","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1032.37"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.7.0-2001.1","6.8.0-2001.1","6.8.0-2002.2","6.8.0-2004.4","6.8.0-2005.5","6.8.0-2006.6","6.8.0-2007.7","6.8.0-2008.8","6.8.0-2009.9","6.8.0-2010.10","6.8.0-2011.11","6.8.0-2012.12","6.8.0-2013.14","6.8.0-2014.15","6.8.0-2015.16","6.8.0-2016.17","6.8.0-2017.18","6.8.0-2018.19","6.8.0-2019.20","6.8.0-2022.23","6.8.0-2023.24","6.8.0-2024.25","6.8.0-2025.26","6.8.0-2026.27","6.8.0-2028.29","6.8.0-2029.30","6.8.0-2030.31","6.8.0-2031.32","6.8.0-2032.33","6.8.0-2033.34","6.8.0-2034.35","6.8.0-2035.36","6.8.0-2036.37","6.8.0-2037.38","6.8.0-2038.39","6.8.0-2040.41","6.8.0-2041.42","6.8.0-2042.43","6.8.0-2043.44","6.8.0-2045.46","6.8.0-2046.47","6.8.0-2049.50","6.8.0-2050.52","6.8.0-2051.53","6.8.0-2052.54","6.8.0-2053.55","6.8.0-2054.56","6.8.0-2056.58"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1062.63"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5","6.8.1-1006.6","6.8.1-1007.7","6.8.1-1008.8","6.8.1-1009.9","6.8.1-1010.10","6.8.1-1011.11","6.8.1-1012.12","6.8.1-1013.14","6.8.1-1014.15","6.8.1-1015.16","6.8.1-1016.17","6.8.1-1017.18","6.8.1-1018.19","6.8.1-1019.20","6.8.1-1020.21","6.8.1-1021.22","6.8.1-1022.23","6.8.1-1023.24","6.8.1-1024.25","6.8.1-1025.26","6.8.1-1026.27","6.8.1-1030.31","6.8.1-1031.32","6.8.1-1033.34","6.8.1-1034.35","6.8.1-1035.36","6.8.1-1036.37","6.8.1-1037.38","6.8.1-1038.39","6.8.1-1039.40","6.8.1-1040.41","6.8.1-1041.42","6.8.1-1042.43","6.8.1-1045.46","6.8.1-1046.47","6.8.1-1047.48","6.8.1-1048.49","6.8.1-1051.52","6.8.1-1052.53","6.8.1-1055.56","6.8.1-1056.57","6.8.1-1057.58","6.8.1-1058.59","6.8.1-1059.60","6.8.1-1060.61","6.8.1-1061.62"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3~24.04.3","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.5~24.04.2","6.17.0-1006.7~24.04.1","6.17.0-1008.9~24.04.1","6.17.0-1009.10~24.04.1","6.17.0-1010.11~24.04.1","6.17.0-1011.12~24.04.1","6.17.0-1013.15~24.04.1","6.17.0-1014.16~24.04.1","6.17.0-1017.19~24.04.1","6.17.0-1018.20~24.04.1","6.17.0-1019.22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1067.70+fips1"}]}],"versions":["6.8.0-1035.37+fips1","6.8.0-1036.38+fips1","6.8.0-1038.40+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.44+fips1","6.8.0-1043.45+fips1","6.8.0-1044.46+fips1","6.8.0-1045.47+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1050.53+fips1","6.8.0-1051.54+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1055.58+fips1","6.8.0-1057.60+fips1","6.8.0-1060.63+fips1","6.8.0-1061.64+fips1","6.8.0-1062.65+fips1","6.8.0-1063.66+fips1","6.8.0-1064.67+fips1","6.8.0-1065.68+fips1","6.8.0-1066.69+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79+fips1"}]}],"versions":["6.8.0-1034.39+fips1","6.8.0-1040.46+fips1","6.8.0-1044.50+fips1","6.8.0-1046.52+fips1","6.8.0-1047.53+fips1","6.8.0-1052.58+fips1","6.8.0-1053.59+fips1","6.8.0-1054.60+fips1","6.8.0-1059.65+fips1","6.8.0-1062.69+fips1","6.8.0-1063.71+fips2","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1069.77+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-147.147+fips1"}]}],"versions":["6.8.0-38.38+fips4","6.8.0-78.78+fips1","6.8.0-79.79+fips1","6.8.0-83.83+fips1","6.8.0-84.84+fips1","6.8.0-85.85+fips1","6.8.0-86.87+fips1","6.8.0-87.88+fips1","6.8.0-88.89+fips1","6.8.0-90.91+fips1","6.8.0-94.96+fips1","6.8.0-100.100+fips1","6.8.0-101.101+fips1","6.8.0-106.106+fips1","6.8.0-107.107+fips1","6.8.0-110.110+fips2","6.8.0-111.111+fips1","6.8.0-116.116+fips1","6.8.0-124.124+fips1","6.8.0-134.134+fips1","6.8.0-136.136+fips2","6.8.0-137.137+fips1","6.8.0-138.138+fips1","6.8.0-139.139+fips1","6.8.0-142.142+fips1","6.8.0-146.146+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79+fips1"}]}],"versions":["6.8.0-1036.38+fips1","6.8.0-1037.39+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.45+fips1","6.8.0-1043.46+fips1","6.8.0-1044.47+fips1","6.8.0-1045.48+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1048.51+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1054.57+fips1","6.8.0-1055.58+fips1","6.8.0-1058.61+fips1","6.8.0-1060.63+fips1","6.8.0-1063.69+fips1","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1066.74+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1070.78+fips1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38"}]}],"versions":["6.17.0-5.5","6.17.0-6.6","6.17.0-8.8","6.18.0-8.8","6.18.0-9.9","6.19.0-3.3","6.19.0-5.5","6.19.0-6.6","6.19.0-9.9","7.0.0-7.7","7.0.0-10.10","7.0.0-12.12","7.0.0-13.13","7.0.0-14.14","7.0.0-15.15","7.0.0-22.22","7.0.0-27.27","7.0.0-28.28","7.0.0-29.29","7.0.0-30.30","7.0.0-31.31","7.0.0-34.34"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1002.2","6.19.0-1003.3","7.0.0-1001.1","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17"}]}],"versions":["6.17.0-1003.3","6.17.0-1004.4","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1014.14"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.16"}]}],"versions":["7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1008.9"}]}],"versions":["7.0.0-1002.3","7.0.0-1003.4","7.0.0-1005.6","7.0.0-1006.7","7.0.0-1007.8"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1015.15"}]}],"versions":["6.19.0-1002.2","6.19.0-1003.3","7.0.0-1002.2","7.0.0-1004.4","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13","7.0.0-1014.14"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1005.5","7.0.0-1006.6","7.0.0-1009.9","7.0.0-1013.13","7.0.0-1015.15","7.0.0-1016.16","7.0.0-1018.18","7.0.0-1025.26"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia-bos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-2022.23"}]}],"versions":["7.0.0-2012.12","7.0.0-2015.15","7.0.0-2016.16","7.0.0-2018.18"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1015.15"}]}],"versions":["7.0.0-1005.5","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13","7.0.0-1014.14"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1003.3","7.0.0-1004.4","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1014.14","7.0.0-1015.15","7.0.0-1016.16","7.0.0-1017.17","7.0.0-1019.19","7.0.0-1020.20","7.0.0-1023.23"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38.1"}]}],"versions":["6.17.0-1001.2","7.0.0-10.10.3","7.0.0-12.12.1","7.0.0-14.14.1","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1","7.0.0-31.31.1","7.0.0-34.34.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38.1"}]}],"versions":["6.17.0-5.5.1","7.0.0-7.7.1","7.0.0-12.12.1","7.0.0-14.14.2","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1","7.0.0-31.31.1","7.0.0-34.34.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1117.124~20.04.1"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1","5.15.0-1040.45~20.04.1","5.15.0-1041.46~20.04.1","5.15.0-1043.48~20.04.1","5.15.0-1044.49~20.04.1","5.15.0-1045.50~20.04.1","5.15.0-1047.52~20.04.1","5.15.0-1048.53~20.04.1","5.15.0-1049.54~20.04.1","5.15.0-1050.55~20.04.1","5.15.0-1051.56~20.04.1","5.15.0-1052.57~20.04.1","5.15.0-1053.58~20.04.1","5.15.0-1055.60~20.04.1","5.15.0-1056.61~20.04.1","5.15.0-1057.63~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1075.82~20.04.1","5.15.0-1077.84~20.04.1","5.15.0-1080.87~20.04.1","5.15.0-1081.88~20.04.1","5.15.0-1082.89~20.04.1","5.15.0-1083.90~20.04.1","5.15.0-1084.91~20.04.1","5.15.0-1086.93~20.04.1","5.15.0-1087.94~20.04.1","5.15.0-1088.95~20.04.1","5.15.0-1089.96~20.04.1","5.15.0-1090.97~20.04.1","5.15.0-1091.98~20.04.1","5.15.0-1092.99~20.04.1","5.15.0-1093.100~20.04.1","5.15.0-1095.102~20.04.1","5.15.0-1096.103~20.04.1","5.15.0-1097.104~20.04.1","5.15.0-1098.105~20.04.1","5.15.0-1099.106~20.04.1","5.15.0-1100.107~20.04.2","5.15.0-1101.108~20.04.1","5.15.0-1103.110~20.04.1","5.15.0-1104.111~20.04.1","5.15.0-1105.112~20.04.1","5.15.0-1106.113~20.04.1","5.15.0-1108.115~20.04.1","5.15.0-1109.116~20.04.1","5.15.0-1111.118~20.04.1","5.15.0-1112.119~20.04.1","5.15.0-1114.121~20.04.1","5.15.0-1115.122~20.04.1","5.15.0-1116.123~20.04.1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1123.132~20.04.1"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1","5.15.0-1042.49~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1056.64~20.04.1","5.15.0-1057.65~20.04.1","5.15.0-1058.66~20.04.2","5.15.0-1059.67~20.04.1","5.15.0-1060.69~20.04.1","5.15.0-1061.70~20.04.1","5.15.0-1063.72~20.04.1","5.15.0-1064.73~20.04.1","5.15.0-1065.74~20.04.1","5.15.0-1067.76~20.04.1","5.15.0-1068.77~20.04.1","5.15.0-1070.79~20.04.1","5.15.0-1071.80~20.04.1","5.15.0-1072.81~20.04.1","5.15.0-1073.82~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1079.88~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1082.91~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.1","5.15.0-1088.97~20.04.1","5.15.0-1089.98~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1094.103~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1102.111~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1110.119~20.04.1","5.15.0-1111.120~20.04.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1122.131~20.04.1"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-198.208~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.86~20.04.2","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.96~20.04.1","5.15.0-87.97~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-130.140~20.04.1","5.15.0-131.141~20.04.1","5.15.0-134.145~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-151.161~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.3","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-176.186~20.04.1","5.15.0-177.187~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-185.195~20.04.1","5.15.0-186.196~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1111.115~20.04.1"}]}],"versions":["5.15.0-1033.36~20.04.1","5.15.0-1034.37~20.04.1","5.15.0-1035.38~20.04.1","5.15.0-1036.39~20.04.1","5.15.0-1037.40~20.04.1","5.15.0-1038.41~20.04.1","5.15.0-1040.43~20.04.1","5.15.0-1041.44~20.04.1","5.15.0-1042.45~20.04.1","5.15.0-1043.46~20.04.1","5.15.0-1044.47~20.04.1","5.15.0-1045.48~20.04.1","5.15.0-1046.49~20.04.1","5.15.0-1047.50~20.04.1","5.15.0-1048.51~20.04.1","5.15.0-1049.52~20.04.1","5.15.0-1050.53~20.04.1","5.15.0-1053.56~20.04.1","5.15.0-1054.57~20.04.1","5.15.0-1055.58~20.04.1","5.15.0-1057.60~20.04.1","5.15.0-1058.61~20.04.1","5.15.0-1059.62~20.04.1","5.15.0-1060.63~20.04.1","5.15.0-1061.64~20.04.1","5.15.0-1062.65~20.04.1","5.15.0-1063.66~20.04.1","5.15.0-1064.67~20.04.1","5.15.0-1065.68~20.04.1","5.15.0-1066.69~20.04.1","5.15.0-1067.70~20.04.1","5.15.0-1068.71~20.04.1","5.15.0-1069.72~20.04.1","5.15.0-1074.77~20.04.1","5.15.0-1075.78~20.04.1","5.15.0-1076.79~20.04.1","5.15.0-1078.81~20.04.1","5.15.0-1079.82~20.04.1","5.15.0-1080.83~20.04.1","5.15.0-1081.84~20.04.1","5.15.0-1083.86~20.04.1","5.15.0-1085.88~20.04.1","5.15.0-1086.89~20.04.1","5.15.0-1087.90~20.04.1","5.15.0-1089.92~20.04.1","5.15.0-1090.93~20.04.1","5.15.0-1091.94~20.04.1","5.15.0-1092.95~20.04.1","5.15.0-1093.96~20.04.1","5.15.0-1094.97~20.04.1","5.15.0-1095.98~20.04.1","5.15.0-1097.100~20.04.1","5.15.0-1098.101~20.04.1","5.15.0-1099.102~20.04.1","5.15.0-1100.103~20.04.1","5.15.0-1102.105~20.04.1","5.15.0-1103.106~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1112.118~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.49~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1060.66~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.2","5.15.0-1074.80~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.1","5.15.0-1086.92~20.04.1","5.15.0-1087.93~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1099.105~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1103.109~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1107.113~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-195.205~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.88~20.04.1","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.95~20.04.1","5.15.0-87.96~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-110.120~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-128.138~20.04.1","5.15.0-129.139~20.04.1","5.15.0-131.141~20.04.1","5.15.0-133.143~20.04.1","5.15.0-134.145~20.04.1","5.15.0-135.146~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-140.150~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.1","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-174.184~20.04.1","5.15.0-175.185~20.04.1","5.15.0-177.187~20.04.1","5.15.0-178.188~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-183.193~20.04.1","5.15.0-184.194~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-198.208"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.86","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.96","5.15.0-87.97","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-112.122","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-130.140","5.15.0-131.141","5.15.0-133.144","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-151.161","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-176.186","5.15.0-177.187","5.15.0-179.189","5.15.0-181.191","5.15.0-185.195","5.15.0-186.196","5.15.0-187.197","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1117.124"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1055.60","5.15.0-1056.61","5.15.0-1057.63","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1076.83","5.15.0-1078.85","5.15.0-1079.86","5.15.0-1080.87","5.15.0-1081.88","5.15.0-1082.89","5.15.0-1083.90","5.15.0-1084.91","5.15.0-1085.92","5.15.0-1086.93","5.15.0-1087.94","5.15.0-1088.95","5.15.0-1089.96","5.15.0-1090.97","5.15.0-1091.98","5.15.0-1092.99","5.15.0-1093.100","5.15.0-1095.102","5.15.0-1096.103","5.15.0-1097.104","5.15.0-1098.105","5.15.0-1099.106","5.15.0-1100.107","5.15.0-1101.108","5.15.0-1103.110","5.15.0-1104.111","5.15.0-1105.112","5.15.0-1106.113","5.15.0-1108.115","5.15.0-1109.116","5.15.0-1111.118","5.15.0-1112.119","5.15.0-1113.120","5.15.0-1114.121","5.15.0-1115.122","5.15.0-1116.123"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1123.132"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48","5.15.0-1042.49","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1056.64","5.15.0-1057.65","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.69","5.15.0-1061.70","5.15.0-1063.72","5.15.0-1064.73","5.15.0-1066.75","5.15.0-1067.76","5.15.0-1068.77","5.15.0-1070.79","5.15.0-1071.80","5.15.0-1072.81","5.15.0-1073.82","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1084.93","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1101.110","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1109.118","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1121.130","5.15.0-1122.131"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1113.119"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1104.110","5.15.0-1105.111","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1100.108"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.37","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.50","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1048.55","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.58","5.15.0-1052.59","5.15.0-1053.60","5.15.0-1054.61","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.90","5.15.0-1083.91","5.15.0-1084.92","5.15.0-1086.94","5.15.0-1087.95","5.15.0-1088.96","5.15.0-1089.97","5.15.0-1091.99","5.15.0-1092.100","5.15.0-1094.102","5.15.0-1095.103","5.15.0-1096.104","5.15.0-1097.105","5.15.0-1098.106","5.15.0-1099.107"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1111.115"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1056.59","5.15.0-1057.60","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1068.71","5.15.0-1069.72","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1081.84","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1094.97","5.15.0-1095.98","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.109","5.15.0-1106.110","5.15.0-1107.111","5.15.0-1108.112","5.15.0-1109.113","5.15.0-1110.114"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1112.118"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.49","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1055.61","5.15.0-1057.63","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1098.104","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1103.109","5.15.0-1104.110","5.15.0-1106.112","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1109.114"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.65","5.15.0-1061.66","5.15.0-1062.67","5.15.0-1063.68","5.15.0-1064.69","5.15.0-1065.70","5.15.0-1066.71","5.15.0-1067.72","5.15.0-1068.73","5.15.0-1069.74","5.15.0-1070.75","5.15.0-1071.76","5.15.0-1072.77","5.15.0-1073.78","5.15.0-1076.81","5.15.0-1077.82","5.15.0-1078.83","5.15.0-1079.84","5.15.0-1080.85","5.15.0-1081.86","5.15.0-1082.87","5.15.0-1083.88","5.15.0-1084.89","5.15.0-1085.90","5.15.0-1086.91","5.15.0-1087.92","5.15.0-1088.93","5.15.0-1089.94","5.15.0-1090.95","5.15.0-1091.96","5.15.0-1092.97","5.15.0-1093.98","5.15.0-1095.100","5.15.0-1096.101","5.15.0-1097.102","5.15.0-1098.103","5.15.0-1100.105","5.15.0-1101.106","5.15.0-1103.108","5.15.0-1104.109","5.15.0-1105.110","5.15.0-1106.111","5.15.0-1107.112","5.15.0-1108.113"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-195.205"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.88","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.95","5.15.0-87.96","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-110.120","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-129.139","5.15.0-131.141","5.15.0-133.143","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-145.158","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-175.185","5.15.0-177.187","5.15.0-178.188","5.15.0-179.189","5.15.0-181.191","5.15.0-183.193","5.15.0-184.194","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1114.120"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1041.47","5.15.0-1042.48","5.15.0-1044.50","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.61","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1098.104","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1103.109","5.15.0-1105.111","5.15.0-1106.112","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1080.84"}]}],"versions":["5.15.0-1022.26","5.15.0-1023.27","5.15.0-1025.29","5.15.0-1027.31","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.42","5.15.0-1039.43","5.15.0-1041.45","5.15.0-1044.48","5.15.0-1046.50","5.15.0-1050.54","5.15.0-1051.55","5.15.0-1052.56","5.15.0-1053.57","5.15.0-1054.58","5.15.0-1055.59","5.15.0-1056.60","5.15.0-1057.61","5.15.0-1059.63","5.15.0-1060.64","5.15.0-1061.65","5.15.0-1062.66","5.15.0-1063.67","5.15.0-1064.68","5.15.0-1065.69","5.15.0-1067.71","5.15.0-1068.72","5.15.0-1069.73","5.15.0-1070.74","5.15.0-1074.78","5.15.0-1075.79","5.15.0-1076.80","5.15.0-1077.81","5.15.0-1078.82","5.15.0-1079.83"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1109.111"}]}],"versions":["5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1028.33","5.15.0-1033.35","5.15.0-1034.36","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1039.41","5.15.0-1040.42","5.15.0-1041.43","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1046.48","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1049.51","5.15.0-1050.52","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1055.57","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1066.68","5.15.0-1071.73","5.15.0-1072.74","5.15.0-1073.75","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1078.80","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1088.90","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1091.93","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1094.96","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105","5.15.0-1104.106","5.15.0-1105.107","5.15.0-1106.108","5.15.0-1107.109","5.15.0-1108.110"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1116.125"}]}],"versions":["5.15.0-1006.6","5.15.0-1007.7","5.15.0-1009.9","5.15.0-1011.11","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1024.25","5.15.0-1025.28","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1039.42","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.52","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1077.85","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1107.116","5.15.0-1108.117","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1112.121","5.15.0-1113.122","5.15.0-1114.123","5.15.0-1115.124"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1117.124+fips1"}]}],"versions":["5.15.0-1051.56+fips1","5.15.0-1052.57+fips1","5.15.0-1053.58+fips1","5.15.0-1055.60+fips1","5.15.0-1056.61+fips1","5.15.0-1057.63+fips1","5.15.0-1060.66+fips1","5.15.0-1061.67+fips1","5.15.0-1062.68+fips1","5.15.0-1063.69+fips1","5.15.0-1064.70+fips1","5.15.0-1065.71+fips1","5.15.0-1066.72+fips1","5.15.0-1067.73+fips1","5.15.0-1068.74+fips1","5.15.0-1069.75+fips1","5.15.0-1070.76+fips1","5.15.0-1071.77+fips1","5.15.0-1072.78+fips1","5.15.0-1073.79+fips1","5.15.0-1076.83+fips1","5.15.0-1077.84+fips1","5.15.0-1078.85+fips1","5.15.0-1079.86+fips1","5.15.0-1080.87+fips1","5.15.0-1081.88+fips1","5.15.0-1082.89+fips1","5.15.0-1083.90+fips1","5.15.0-1084.91+fips1","5.15.0-1085.92+fips1","5.15.0-1086.93+fips1","5.15.0-1087.94+fips1","5.15.0-1088.95+fips1","5.15.0-1089.96+fips1","5.15.0-1090.97+fips1","5.15.0-1091.98+fips1","5.15.0-1092.99+fips1","5.15.0-1093.100+fips1","5.15.0-1095.102+fips1","5.15.0-1096.103+fips1","5.15.0-1097.104+fips1","5.15.0-1098.105+fips1","5.15.0-1099.106+fips1","5.15.0-1100.107+fips1","5.15.0-1101.108+fips1","5.15.0-1103.110+fips1","5.15.0-1104.111+fips1","5.15.0-1105.112+fips1","5.15.0-1106.113+fips1","5.15.0-1108.115+fips1","5.15.0-1109.116+fips1","5.15.0-1111.118+fips1","5.15.0-1112.119+fips1","5.15.0-1113.120+fips1","5.15.0-1114.121+fips1","5.15.0-1115.122+fips1","5.15.0-1116.123+fips1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1123.132+fips1"}]}],"versions":["5.15.0-1053.61+fips1","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.69+fips1","5.15.0-1061.70+fips1","5.15.0-1063.72+fips1","5.15.0-1064.73+fips1","5.15.0-1065.74+fips1","5.15.0-1067.76+fips1","5.15.0-1068.77+fips1","5.15.0-1070.79+fips1","5.15.0-1071.80+fips1","5.15.0-1072.81+fips1","5.15.0-1073.82+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1085.94+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1089.98+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1094.103+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1101.110+fips1","5.15.0-1102.111+fips1","5.15.0-1103.112+fips1","5.15.0-1109.118+fips1","5.15.0-1110.119+fips1","5.15.0-1111.120+fips1","5.15.0-1114.123+fips1","5.15.0-1116.125+fips1","5.15.0-1117.126+fips1","5.15.0-1118.127+fips1","5.15.0-1119.128+fips1","5.15.0-1121.130+fips1","5.15.0-1122.131+fips1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-198.208+fips1"}]}],"versions":["5.15.0-73.80+fips1","5.15.0-92.102+fips1","5.15.0-94.104+fips1","5.15.0-97.107+fips1","5.15.0-100.110+fips1","5.15.0-101.111+fips1","5.15.0-102.112+fips1","5.15.0-105.115+fips1","5.15.0-106.116+fips1","5.15.0-107.117+fips1","5.15.0-111.121+fips1","5.15.0-113.123+fips1","5.15.0-115.125+fips1","5.15.0-117.127+fips1","5.15.0-118.128+fips1","5.15.0-119.129+fips1","5.15.0-121.131+fips1","5.15.0-122.132+fips1","5.15.0-124.134+fips1","5.15.0-125.135+fips1","5.15.0-127.137+fips1","5.15.0-128.138+fips1","5.15.0-130.140+fips1","5.15.0-131.141+fips1","5.15.0-133.144+fips1","5.15.0-134.145+fips1","5.15.0-135.146+fips1","5.15.0-136.147+fips1","5.15.0-138.148+fips1","5.15.0-139.149+fips1","5.15.0-140.150+fips1","5.15.0-141.151+fips1","5.15.0-142.152+fips1","5.15.0-143.153+fips1","5.15.0-144.157+fips1","5.15.0-145.158+fips1","5.15.0-152.162+fips1","5.15.0-153.163+fips1","5.15.0-156.166+fips1","5.15.0-157.167+fips1","5.15.0-160.170+fips1","5.15.0-161.171+fips1","5.15.0-163.173+fips1","5.15.0-164.174+fips1","5.15.0-168.178+fips1","5.15.0-170.180+fips1","5.15.0-171.181+fips1","5.15.0-173.183+fips1","5.15.0-174.184+fips1","5.15.0-176.186+fips1","5.15.0-177.187+fips1","5.15.0-179.189+fips1","5.15.0-181.191+fips1","5.15.0-185.195+fips1","5.15.0-186.196+fips1","5.15.0-190.200+fips1","5.15.0-191.201+fips1","5.15.0-194.204+fips1"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1112.113"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1037.37","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1053.54","5.15.0-1054.55","5.15.0-1055.56","5.15.0-1058.59","5.15.0-1059.60","5.15.0-1060.61","5.15.0-1061.62","5.15.0-1062.63","5.15.0-1063.64","5.15.0-1064.65","5.15.0-1065.66","5.15.0-1066.67","5.15.0-1067.68","5.15.0-1068.69","5.15.0-1069.70","5.15.0-1070.71","5.15.0-1071.72","5.15.0-1072.73","5.15.0-1073.74","5.15.0-1074.75","5.15.0-1075.76","5.15.0-1076.77","5.15.0-1077.78","5.15.0-1078.79","5.15.0-1079.80","5.15.0-1080.81","5.15.0-1081.82","5.15.0-1082.83","5.15.0-1083.84","5.15.0-1085.86","5.15.0-1086.87","5.15.0-1087.88","5.15.0-1088.89","5.15.0-1090.91","5.15.0-1091.92","5.15.0-1092.93","5.15.0-1093.94","5.15.0-1094.95","5.15.0-1095.96","5.15.0-1096.97","5.15.0-1098.99","5.15.0-1099.100","5.15.0-1100.101","5.15.0-1101.102","5.15.0-1103.104","5.15.0-1104.105","5.15.0-1106.107","5.15.0-1107.108","5.15.0-1108.109","5.15.0-1109.110","5.15.0-1110.111","5.15.0-1111.112"],"bundled":951},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1122.131"}]}],"versions":["5.15.0-1019.24.1","5.15.0-1024.30.1","5.15.0-1029.36.1","5.15.0-1030.37.1","5.15.0-1031.38.1","5.15.0-1033.40.1","5.15.0-1034.41.1","5.15.0-1035.42.1","5.15.0-1036.43.1","5.15.0-1037.44.1","5.15.0-1038.45.1","5.15.0-1039.46.1","5.15.0-1041.48.1","5.15.0-1042.49.1","5.15.0-1044.51.1","5.15.0-1045.52.1","5.15.0-1046.53.1","5.15.0-1047.54.1","5.15.0-1049.56.1","5.15.0-1050.57.1","5.15.0-1051.59.1","5.15.0-1052.60.1","5.15.0-1053.61.1","5.15.0-1054.62.1","5.15.0-1056.64.1","5.15.0-1057.65.1","5.15.0-1058.66.1","5.15.0-1059.67.1","5.15.0-1060.69.1","5.15.0-1061.70.1","5.15.0-1063.72.1","5.15.0-1064.73.1","5.15.0-1065.74.1","5.15.0-1067.76.1","5.15.0-1068.77.1","5.15.0-1070.79.1","5.15.0-1071.80.1","5.15.0-1072.81.1","5.15.0-1073.82.1","5.15.0-1076.85.1","5.15.0-1078.87.1","5.15.0-1081.90.1","5.15.0-1082.91.1","5.15.0-1084.93.1","5.15.0-1086.95.1","5.15.0-1087.96.1","5.15.0-1088.97.1","5.15.0-1089.98.1","5.15.0-1090.99.1","5.15.0-1091.100.1","5.15.0-1092.101.1","5.15.0-1094.103.1","5.15.0-1095.104.1","5.15.0-1096.105.1","5.15.0-1097.106.1","5.15.0-1098.107.1","5.15.0-1102.111.1","5.15.0-1109.118.1","5.15.0-1110.119.1","5.15.0-1111.120.1","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1120.129","5.15.0-1121.130"],"bundled":722},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1118.128"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45","5.15.0-1038.46","5.15.0-1039.47","5.15.0-1040.48","5.15.0-1041.49","5.15.0-1042.50","5.15.0-1044.52","5.15.0-1045.53","5.15.0-1046.54","5.15.0-1047.55","5.15.0-1048.56","5.15.0-1049.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1055.63","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1077.86","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1080.89","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1101.110","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1106.115","5.15.0-1108.117","5.15.0-1109.118","5.15.0-1111.121","5.15.0-1112.122","5.15.0-1114.124","5.15.0-1115.125","5.15.0-1117.127"],"bundled":952},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1118.128+fips1"}]}],"versions":["5.15.0-1048.56+fips1","5.15.0-1055.63+fips2","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.68+fips1","5.15.0-1062.70+fips1","5.15.0-1063.71+fips1","5.15.0-1064.72+fips1","5.15.0-1065.73+fips1","5.15.0-1066.74+fips1","5.15.0-1067.75+fips1","5.15.0-1068.76+fips1","5.15.0-1069.77+fips1","5.15.0-1070.78+fips1","5.15.0-1071.79+fips1","5.15.0-1072.80+fips1","5.15.0-1073.81+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1077.86+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1081.90+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1084.93+fips1","5.15.0-1085.94+fips1","5.15.0-1086.95+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1092.101+fips1","5.15.0-1093.102+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1099.108+fips1","5.15.0-1100.109+fips1","5.15.0-1101.110+fips1","5.15.0-1103.112+fips1","5.15.0-1104.113+fips1","5.15.0-1105.114+fips1","5.15.0-1106.115+fips1","5.15.0-1108.117+fips1","5.15.0-1109.118+fips1","5.15.0-1111.121+fips1","5.15.0-1112.122+fips1","5.15.0-1114.124+fips1","5.15.0-1115.125+fips1","5.15.0-1116.126+fips1"],"bundled":952},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1118.128~20.04.1"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1","5.15.0-1038.46~20.04.1","5.15.0-1039.47~20.04.1","5.15.0-1040.48~20.04.1","5.15.0-1041.49~20.04.1","5.15.0-1042.50~20.04.1","5.15.0-1044.52~20.04.1","5.15.0-1045.53~20.04.2","5.15.0-1046.54~20.04.1","5.15.0-1047.55~20.04.1","5.15.0-1048.56~20.04.1","5.15.0-1049.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1055.63~20.04.1","5.15.0-1058.66~20.04.1","5.15.0-1059.67~20.04.1","5.15.0-1060.68~20.04.1","5.15.0-1062.70~20.04.1","5.15.0-1065.73~20.04.1","5.15.0-1066.74~20.04.1","5.15.0-1067.75~20.04.1","5.15.0-1068.76~20.04.1","5.15.0-1069.77~20.04.1","5.15.0-1070.78~20.04.1","5.15.0-1071.79~20.04.1","5.15.0-1072.80~20.04.1","5.15.0-1073.81~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1077.86~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1083.92~20.04.1","5.15.0-1085.94~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.2","5.15.0-1088.97~20.04.1","5.15.0-1090.99~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1092.101~20.04.1","5.15.0-1093.102~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1099.108~20.04.1","5.15.0-1100.109~20.04.1","5.15.0-1101.110~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1104.113~20.04.1","5.15.0-1106.115~20.04.1","5.15.0-1108.117~20.04.1","5.15.0-1109.118~20.04.1","5.15.0-1111.121~20.04.1","5.15.0-1112.122~20.04.1","5.15.0-1114.124~20.04.1"],"bundled":973},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1114.120~20.04.1"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1041.47~20.04.1","5.15.0-1042.48~20.04.1","5.15.0-1044.50~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1047.53~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1053.59~20.04.1","5.15.0-1054.60~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1074.80~20.04.1","5.15.0-1075.81~20.04.1","5.15.0-1076.82~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1080.86~20.04.1","5.15.0-1081.87~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.3","5.15.0-1086.92~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1097.103~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1102.108~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1"],"bundled":972},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1036.39"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1031.32","6.8.0-1032.34","6.8.0-1035.38"],"bundled":684},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38"}]}],"versions":["6.17.0-5.5","6.17.0-6.6","6.17.0-8.8","6.18.0-8.8","6.18.0-9.9","6.19.0-3.3","6.19.0-5.5","6.19.0-6.6","6.19.0-9.9","7.0.0-7.7","7.0.0-10.10","7.0.0-12.12","7.0.0-13.13","7.0.0-14.14","7.0.0-15.15","7.0.0-22.22","7.0.0-27.27","7.0.0-28.28","7.0.0-29.29","7.0.0-30.30","7.0.0-31.31","7.0.0-34.34"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1002.2","6.19.0-1003.3","7.0.0-1001.1","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1008.9"}]}],"versions":["7.0.0-1002.3","7.0.0-1003.4","7.0.0-1005.6","7.0.0-1006.7","7.0.0-1007.8"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1015.15"}]}],"versions":["6.19.0-1002.2","6.19.0-1003.3","7.0.0-1002.2","7.0.0-1004.4","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13","7.0.0-1014.14"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38.1"}]}],"versions":["6.17.0-1001.2","7.0.0-10.10.3","7.0.0-12.12.1","7.0.0-14.14.1","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1","7.0.0-31.31.1","7.0.0-34.34.1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14~24.04.1"}]}],"versions":["7.0.0-1007.7~24.04.2","7.0.0-1009.9~24.04.1","7.0.0-1010.10~24.04.1","7.0.0-1011.11~24.04.1","7.0.0-1012.12~24.04.1","7.0.0-1013.13~24.04.1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1014.14~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.2","7.0.0-1011.11~24.04.1","7.0.0-1013.13~24.04.1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-38.38~24.04.4"}]}],"versions":["7.0.0-14.14~24.04.3","7.0.0-28.28~24.04.1","7.0.0-29.29~24.04.2","7.0.0-30.30~24.04.1","7.0.0-31.31~24.04.1","7.0.0-34.34~24.04.1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1013.13~24.04.1"}]}],"versions":["7.0.0-1006.6~24.04.3","7.0.0-1011.11~24.04.1","7.0.0-1012.12~24.04.1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17"}]}],"versions":["6.17.0-1003.3","6.17.0-1004.4","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1014.14"],"bundled":1151},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.16"}]}],"versions":["7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13"],"bundled":1151},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17~24.04.1"}]}],"versions":["7.0.0-1008.8~24.04.2","7.0.0-1014.14~24.04.1"],"bundled":1151},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.16~24.04.1"}]}],"versions":["7.0.0-1007.7~24.04.3","7.0.0-1013.13~24.04.1"],"bundled":1151},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1015.15"}]}],"versions":["7.0.0-1005.5","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13","7.0.0-1014.14"],"bundled":1049},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-147.147"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55","6.8.0-54.56","6.8.0-55.57","6.8.0-56.58","6.8.0-57.59","6.8.0-58.60","6.8.0-59.61","6.8.0-60.63","6.8.0-62.65","6.8.0-63.66","6.8.0-64.67","6.8.0-71.71","6.8.0-78.78","6.8.0-79.79","6.8.0-83.83","6.8.0-84.84","6.8.0-85.85","6.8.0-86.87","6.8.0-87.88","6.8.0-88.89","6.8.0-90.91","6.8.0-94.96","6.8.0-100.100","6.8.0-101.101","6.8.0-106.106","6.8.0-107.107","6.8.0-110.110","6.8.0-111.111","6.8.0-117.117","6.8.0-124.124","6.8.0-134.134","6.8.0-136.136","6.8.0-137.137","6.8.0-138.138","6.8.0-139.139","6.8.0-142.142","6.8.0-146.146"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1067.70"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1035.37","6.8.0-1036.38","6.8.0-1038.40","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.44","6.8.0-1043.45","6.8.0-1044.46","6.8.0-1045.47","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1055.58","6.8.0-1057.60","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67","6.8.0-1065.68","6.8.0-1066.69"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1034.36","6.8.0-1036.38","6.8.0-1037.39","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1048.51","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1060.63","6.8.0-1063.69","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1066.74","6.8.0-1067.75","6.8.0-1069.77","6.8.0-1070.78"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1066.74"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1021.25","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1024.28","6.8.0-1025.29","6.8.0-1026.30","6.8.0-1027.31","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1032.36","6.8.0-1033.37","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1037.41","6.8.0-1038.43","6.8.0-1039.44","6.8.0-1040.45","6.8.0-1041.46","6.8.0-1042.47","6.8.0-1043.48","6.8.0-1044.49","6.8.0-1048.53","6.8.0-1049.54","6.8.0-1050.56","6.8.0-1051.57","6.8.0-1054.60","6.8.0-1055.61","6.8.0-1058.64","6.8.0-1059.67","6.8.0-1060.68","6.8.0-1061.69","6.8.0-1062.70","6.8.0-1064.72","6.8.0-1065.73"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1052.56"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6","6.8.0-1006.8","6.8.0-1007.9","6.8.0-1008.10","6.8.0-1009.11","6.8.0-1010.12","6.8.0-1011.13","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1022.24","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1037.40","6.8.0-1038.41","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1045.48","6.8.0-1046.50","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1049.53","6.8.0-1050.54","6.8.0-1051.55"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1067.68"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1033.33","6.8.0-1036.36","6.8.0-1037.37","6.8.0-1038.38","6.8.0-1039.39","6.8.0-1040.40","6.8.0-1041.41","6.8.0-1042.42","6.8.0-1043.43","6.8.0-1044.44","6.8.0-1045.45","6.8.0-1049.49","6.8.0-1050.50","6.8.0-1051.51","6.8.0-1052.52","6.8.0-1055.56","6.8.0-1057.58","6.8.0-1060.61","6.8.0-1061.62","6.8.0-1062.63","6.8.0-1063.64","6.8.0-1064.65","6.8.0-1065.66","6.8.0-1066.67"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-147.147.1"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2","6.8.0-54.56.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1","6.8.0-62.65.1","6.8.0-63.66.1","6.8.0-64.67.1","6.8.0-65.68.1","6.8.0-78.78.1","6.8.0-79.79.1","6.8.0-83.83.1","6.8.0-84.84.1","6.8.0-85.85.1","6.8.0-86.87.1","6.8.0-87.88.1","6.8.0-88.89.1","6.8.0-90.91.1","6.8.0-94.96.1","6.8.0-100.100.1","6.8.0-101.101.1","6.8.0-106.106.1","6.8.0-107.107.1","6.8.0-110.110.1","6.8.0-111.111.1","6.8.0-117.117.1","6.8.0-134.134.1","6.8.0-136.136.2","6.8.0-137.137.1","6.8.0-138.138.1","6.8.0-139.139.1","6.8.0-142.142.1","6.8.0-146.146.1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1064.67"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1025.26","6.8.0-1026.27","6.8.0-1027.28","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1035.36","6.8.0-1037.38","6.8.0-1038.39","6.8.0-1039.40","6.8.0-1040.41","6.8.0-1041.42","6.8.0-1042.43","6.8.0-1043.44","6.8.0-1044.45","6.8.0-1047.48","6.8.0-1049.50","6.8.0-1050.51","6.8.0-1052.53","6.8.0-1054.55","6.8.0-1057.58","6.8.0-1058.61","6.8.0-1059.62","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1062.63"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5","6.8.1-1006.6","6.8.1-1007.7","6.8.1-1008.8","6.8.1-1009.9","6.8.1-1010.10","6.8.1-1011.11","6.8.1-1012.12","6.8.1-1013.14","6.8.1-1014.15","6.8.1-1015.16","6.8.1-1016.17","6.8.1-1017.18","6.8.1-1018.19","6.8.1-1019.20","6.8.1-1020.21","6.8.1-1021.22","6.8.1-1022.23","6.8.1-1023.24","6.8.1-1024.25","6.8.1-1025.26","6.8.1-1026.27","6.8.1-1030.31","6.8.1-1031.32","6.8.1-1033.34","6.8.1-1034.35","6.8.1-1035.36","6.8.1-1036.37","6.8.1-1037.38","6.8.1-1038.39","6.8.1-1039.40","6.8.1-1040.41","6.8.1-1041.42","6.8.1-1042.43","6.8.1-1045.46","6.8.1-1046.47","6.8.1-1047.48","6.8.1-1048.49","6.8.1-1051.52","6.8.1-1052.53","6.8.1-1055.56","6.8.1-1056.57","6.8.1-1057.58","6.8.1-1058.59","6.8.1-1059.60","6.8.1-1060.61","6.8.1-1061.62"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1067.70+fips1"}]}],"versions":["6.8.0-1035.37+fips1","6.8.0-1036.38+fips1","6.8.0-1038.40+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.44+fips1","6.8.0-1043.45+fips1","6.8.0-1044.46+fips1","6.8.0-1045.47+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1050.53+fips1","6.8.0-1051.54+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1055.58+fips1","6.8.0-1057.60+fips1","6.8.0-1060.63+fips1","6.8.0-1061.64+fips1","6.8.0-1062.65+fips1","6.8.0-1063.66+fips1","6.8.0-1064.67+fips1","6.8.0-1065.68+fips1","6.8.0-1066.69+fips1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-147.147+fips1"}]}],"versions":["6.8.0-38.38+fips4","6.8.0-78.78+fips1","6.8.0-79.79+fips1","6.8.0-83.83+fips1","6.8.0-84.84+fips1","6.8.0-85.85+fips1","6.8.0-86.87+fips1","6.8.0-87.88+fips1","6.8.0-88.89+fips1","6.8.0-90.91+fips1","6.8.0-94.96+fips1","6.8.0-100.100+fips1","6.8.0-101.101+fips1","6.8.0-106.106+fips1","6.8.0-107.107+fips1","6.8.0-110.110+fips2","6.8.0-111.111+fips1","6.8.0-116.116+fips1","6.8.0-124.124+fips1","6.8.0-134.134+fips1","6.8.0-136.136+fips2","6.8.0-137.137+fips1","6.8.0-138.138+fips1","6.8.0-139.139+fips1","6.8.0-142.142+fips1","6.8.0-146.146+fips1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79+fips1"}]}],"versions":["6.8.0-1036.38+fips1","6.8.0-1037.39+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.45+fips1","6.8.0-1043.46+fips1","6.8.0-1044.47+fips1","6.8.0-1045.48+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1048.51+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1054.57+fips1","6.8.0-1055.58+fips1","6.8.0-1058.61+fips1","6.8.0-1060.63+fips1","6.8.0-1063.69+fips1","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1066.74+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1070.78+fips1"],"bundled":1050},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25","6.8.0-1025.30","6.8.0-1026.31","6.8.0-1027.32","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1034.39","6.8.0-1038.44","6.8.0-1040.46","6.8.0-1041.47","6.8.0-1042.48","6.8.0-1044.50","6.8.0-1046.52","6.8.0-1051.57","6.8.0-1052.58","6.8.0-1054.60","6.8.0-1056.62","6.8.0-1058.64","6.8.0-1059.65","6.8.0-1062.69","6.8.0-1063.71","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1067.75","6.8.0-1068.76","6.8.0-1070.78"],"bundled":1049},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1069.76"}]}],"versions":["6.8.0-1041.48","6.8.0-1044.51","6.8.0-1046.53","6.8.0-1053.60","6.8.0-1058.65","6.8.0-1061.68","6.8.0-1062.69","6.8.0-1063.70","6.8.0-1064.71","6.8.0-1065.72","6.8.0-1066.73","6.8.0-1068.75"],"bundled":1049},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1071.79+fips1"}]}],"versions":["6.8.0-1034.39+fips1","6.8.0-1040.46+fips1","6.8.0-1044.50+fips1","6.8.0-1046.52+fips1","6.8.0-1047.53+fips1","6.8.0-1052.58+fips1","6.8.0-1053.59+fips1","6.8.0-1054.60+fips1","6.8.0-1059.65+fips1","6.8.0-1062.69+fips1","6.8.0-1063.71+fips2","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1069.77+fips1"],"bundled":1049},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-nvidia-tegra-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1070.72~20.04.1"}]}],"versions":["5.15.0-1009.9~20.04.1","5.15.0-1010.10~20.04.1","5.15.0-1012.12~20.04.1","5.15.0-1014.14~20.04.1","5.15.0-1015.15~20.04.1","5.15.0-1016.16~20.04.1","5.15.0-1017.17~20.04.1","5.15.0-1018.18~20.04.1","5.15.0-1019.19~20.04.1","5.15.0-1020.20~20.04.1","5.15.0-1022.22~20.04.1","5.15.0-1025.25~20.04.1","5.15.0-1027.27~20.04.1","5.15.0-1030.30~20.04.1","5.15.0-1032.32~20.04.1","5.15.0-1039.39~20.04.1","5.15.0-1040.40~20.04.1","5.15.0-1041.41~20.04.1","5.15.0-1042.42~20.04.1","5.15.0-1043.43~20.04.1","5.15.0-1044.44~20.04.1","5.15.0-1045.45~20.04.1","5.15.0-1046.46~20.04.1","5.15.0-1047.47~20.04.1","5.15.0-1048.48~20.04.1","5.15.0-1049.49~20.04.1","5.15.0-1050.50~20.04.1","5.15.0-1051.51~20.04.1","5.15.0-1052.52~20.04.2","5.15.0-1053.53~20.04.1","5.15.0-1055.55~20.04.1","5.15.0-1057.57~20.04.1","5.15.0-1058.58~20.04.1","5.15.0-1060.60~20.04.1","5.15.0-1061.61~20.04.1","5.15.0-1063.63~20.04.1","5.15.0-1064.66~20.04.1","5.15.0-1065.67~20.04.1","5.15.0-1066.68~20.04.1","5.15.0-1067.69~20.04.1","5.15.0-1068.70~20.04.1"],"bundled":2016},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1070.72"}]}],"versions":["5.15.0-1009.9","5.15.0-1010.10","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1030.30","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1051.51","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1058.58","5.15.0-1060.60","5.15.0-1061.61","5.15.0-1063.63","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1068.70"],"bundled":2016},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1059.59"}]}],"versions":["5.15.0-1001.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1009.9","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1023.23","5.15.0-1024.24","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1054.54","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57"],"bundled":2016},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1024.25~24.04.1"}]}],"versions":["7.0.0-1013.13~24.04.1","7.0.0-1015.15~24.04.1","7.0.0-1016.16~24.04.1","7.0.0-1018.18~24.04.1","7.0.0-1019.19~24.04.2"],"bundled":1150},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia-bos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-2022.23"}]}],"versions":["7.0.0-2012.12","7.0.0-2015.15","7.0.0-2016.16","7.0.0-2018.18"],"bundled":1150}],"products":[{"vendor":"linux","product":"linux"}],"references":[{"url":"https://git.kernel.org/stable/c/ed0ffc2c016629e40ba041ed0424a772d8b02e2c","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/232dcf908eb7eb9d8046a9597975caf44270966e","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/dda695fab5e21f923d29e8cb01df256468ddfbd1","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/9c513dabd4540f811585a2087f23069767a284da","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/21a13f932972bc9836f58c44fcd47c62abdecd95","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/ada4b9a5087ea7f30dd8e4c6411a4fb6547eb1ed","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/947b773caaa548672184df025271b29bdc80b0f1","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/f20d61c22bcaf172d6790b6500e3838e532e71c8","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72135","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mgw8-pg67-5pw5"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-72135","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72135.json","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-72135","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37991","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72350","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3703","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38736","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72061","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72172","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72217","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72316","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72317","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72318","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72389","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72400","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72450","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72473","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74378","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74406","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71123","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23317","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23359","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63800","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63917","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63924","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63944","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63952","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63968","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63985","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63992","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63994","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64088","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64106","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64113","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64247","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64298","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64313","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64317","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64324","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64378","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64380","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64382","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64481","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64496","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74258","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74363","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624181-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222538","tags":["report"]},{"url":"https://bugzilla.suse.com/1254408","tags":["report"]},{"url":"https://bugzilla.suse.com/1258298","tags":["report"]},{"url":"https://bugzilla.suse.com/1260474","tags":["report"]},{"url":"https://bugzilla.suse.com/1263017","tags":["report"]},{"url":"https://bugzilla.suse.com/1263602","tags":["report"]},{"url":"https://bugzilla.suse.com/1263865","tags":["report"]},{"url":"https://bugzilla.suse.com/1264747","tags":["report"]},{"url":"https://bugzilla.suse.com/1264807","tags":["report"]},{"url":"https://bugzilla.suse.com/1266410","tags":["report"]},{"url":"https://bugzilla.suse.com/1266735","tags":["report"]},{"url":"https://bugzilla.suse.com/1266848","tags":["report"]},{"url":"https://bugzilla.suse.com/1267373","tags":["report"]},{"url":"https://bugzilla.suse.com/1267464","tags":["report"]},{"url":"https://bugzilla.suse.com/1267564","tags":["report"]},{"url":"https://bugzilla.suse.com/1267648","tags":["report"]},{"url":"https://bugzilla.suse.com/1267985","tags":["report"]},{"url":"https://bugzilla.suse.com/1269000","tags":["report"]},{"url":"https://bugzilla.suse.com/1269685","tags":["report"]},{"url":"https://bugzilla.suse.com/1269816","tags":["report"]},{"url":"https://bugzilla.suse.com/1271817","tags":["report"]},{"url":"https://bugzilla.suse.com/1271906","tags":["report"]},{"url":"https://bugzilla.suse.com/1272145","tags":["report"]},{"url":"https://bugzilla.suse.com/1272215","tags":["report"]},{"url":"https://bugzilla.suse.com/1272426","tags":["report"]},{"url":"https://bugzilla.suse.com/1272471","tags":["report"]},{"url":"https://bugzilla.suse.com/1272473","tags":["report"]},{"url":"https://bugzilla.suse.com/1272572","tags":["report"]},{"url":"https://bugzilla.suse.com/1272793","tags":["report"]},{"url":"https://bugzilla.suse.com/1272847","tags":["report"]},{"url":"https://bugzilla.suse.com/1272890","tags":["report"]},{"url":"https://bugzilla.suse.com/1273059","tags":["report"]},{"url":"https://bugzilla.suse.com/1273251","tags":["report"]},{"url":"https://bugzilla.suse.com/1273258","tags":["report"]},{"url":"https://bugzilla.suse.com/1273309","tags":["report"]},{"url":"https://bugzilla.suse.com/1273339","tags":["report"]},{"url":"https://bugzilla.suse.com/1273420","tags":["report"]},{"url":"https://bugzilla.suse.com/1273512","tags":["report"]},{"url":"https://bugzilla.suse.com/1273522","tags":["report"]},{"url":"https://bugzilla.suse.com/1273750","tags":["report"]},{"url":"https://bugzilla.suse.com/1273759","tags":["report"]},{"url":"https://bugzilla.suse.com/1273776","tags":["report"]},{"url":"https://bugzilla.suse.com/1273782","tags":["report"]},{"url":"https://bugzilla.suse.com/1273870","tags":["report"]},{"url":"https://bugzilla.suse.com/1273879","tags":["report"]},{"url":"https://bugzilla.suse.com/1273889","tags":["report"]},{"url":"https://bugzilla.suse.com/1273899","tags":["report"]},{"url":"https://bugzilla.suse.com/1273938","tags":["report"]},{"url":"https://bugzilla.suse.com/1273953","tags":["report"]},{"url":"https://bugzilla.suse.com/1273976","tags":["report"]},{"url":"https://bugzilla.suse.com/1273999","tags":["report"]},{"url":"https://bugzilla.suse.com/1274010","tags":["report"]},{"url":"https://bugzilla.suse.com/1274036","tags":["report"]},{"url":"https://bugzilla.suse.com/1274037","tags":["report"]},{"url":"https://bugzilla.suse.com/1274245","tags":["report"]},{"url":"https://bugzilla.suse.com/1274316","tags":["report"]},{"url":"https://bugzilla.suse.com/1274319","tags":["report"]},{"url":"https://bugzilla.suse.com/1274494","tags":["report"]},{"url":"https://bugzilla.suse.com/1274637","tags":["report"]},{"url":"https://bugzilla.suse.com/1274730","tags":["report"]},{"url":"https://bugzilla.suse.com/1274776","tags":["report"]},{"url":"https://bugzilla.suse.com/1274803","tags":["report"]},{"url":"https://bugzilla.suse.com/1274836","tags":["report"]},{"url":"https://bugzilla.suse.com/1274838","tags":["report"]},{"url":"https://bugzilla.suse.com/1274890","tags":["report"]},{"url":"https://bugzilla.suse.com/1275092","tags":["report"]},{"url":"https://bugzilla.suse.com/1275094","tags":["report"]},{"url":"https://bugzilla.suse.com/1275129","tags":["report"]},{"url":"https://bugzilla.suse.com/1275156","tags":["report"]},{"url":"https://bugzilla.suse.com/1275455","tags":["report"]},{"url":"https://bugzilla.suse.com/1275495","tags":["report"]},{"url":"https://bugzilla.suse.com/1275542","tags":["report"]},{"url":"https://bugzilla.suse.com/1275543","tags":["report"]},{"url":"https://bugzilla.suse.com/1275545","tags":["report"]},{"url":"https://bugzilla.suse.com/1275549","tags":["report"]},{"url":"https://bugzilla.suse.com/1275559","tags":["report"]},{"url":"https://bugzilla.suse.com/1275567","tags":["report"]},{"url":"https://bugzilla.suse.com/1275588","tags":["report"]},{"url":"https://bugzilla.suse.com/1275681","tags":["report"]},{"url":"https://bugzilla.suse.com/1275684","tags":["report"]},{"url":"https://bugzilla.suse.com/1275685","tags":["report"]},{"url":"https://bugzilla.suse.com/1275690","tags":["report"]},{"url":"https://bugzilla.suse.com/1275694","tags":["report"]},{"url":"https://bugzilla.suse.com/1275799","tags":["report"]},{"url":"https://bugzilla.suse.com/1275802","tags":["report"]},{"url":"https://bugzilla.suse.com/1275866","tags":["report"]},{"url":"https://bugzilla.suse.com/1275924","tags":["report"]},{"url":"https://bugzilla.suse.com/1275953","tags":["report"]},{"url":"https://bugzilla.suse.com/1275972","tags":["report"]},{"url":"https://bugzilla.suse.com/1275977","tags":["report"]},{"url":"https://bugzilla.suse.com/1275985","tags":["report"]},{"url":"https://bugzilla.suse.com/1276006","tags":["report"]},{"url":"https://bugzilla.suse.com/1276007","tags":["report"]},{"url":"https://bugzilla.suse.com/1276009","tags":["report"]},{"url":"https://bugzilla.suse.com/1276287","tags":["report"]},{"url":"https://bugzilla.suse.com/1276295","tags":["report"]},{"url":"https://bugzilla.suse.com/1276337","tags":["report"]},{"url":"https://bugzilla.suse.com/1276338","tags":["report"]},{"url":"https://bugzilla.suse.com/1276339","tags":["report"]},{"url":"https://bugzilla.suse.com/1276340","tags":["report"]},{"url":"https://bugzilla.suse.com/1276341","tags":["report"]},{"url":"https://bugzilla.suse.com/1276349","tags":["report"]},{"url":"https://bugzilla.suse.com/1276352","tags":["report"]},{"url":"https://bugzilla.suse.com/1276353","tags":["report"]},{"url":"https://bugzilla.suse.com/1276354","tags":["report"]},{"url":"https://bugzilla.suse.com/1276381","tags":["report"]},{"url":"https://bugzilla.suse.com/1276388","tags":["report"]},{"url":"https://bugzilla.suse.com/1276395","tags":["report"]},{"url":"https://bugzilla.suse.com/1276445","tags":["report"]},{"url":"https://bugzilla.suse.com/1276460","tags":["report"]},{"url":"https://bugzilla.suse.com/1276461","tags":["report"]},{"url":"https://bugzilla.suse.com/1276462","tags":["report"]},{"url":"https://bugzilla.suse.com/1276468","tags":["report"]},{"url":"https://bugzilla.suse.com/1276473","tags":["report"]},{"url":"https://bugzilla.suse.com/1276474","tags":["report"]},{"url":"https://bugzilla.suse.com/1276475","tags":["report"]},{"url":"https://bugzilla.suse.com/1276504","tags":["report"]},{"url":"https://bugzilla.suse.com/1276508","tags":["report"]},{"url":"https://bugzilla.suse.com/1276512","tags":["report"]},{"url":"https://bugzilla.suse.com/1276519","tags":["report"]},{"url":"https://bugzilla.suse.com/1276528","tags":["report"]},{"url":"https://bugzilla.suse.com/1276532","tags":["report"]},{"url":"https://bugzilla.suse.com/1276535","tags":["report"]},{"url":"https://bugzilla.suse.com/1276538","tags":["report"]},{"url":"https://bugzilla.suse.com/1276547","tags":["report"]},{"url":"https://bugzilla.suse.com/1276553","tags":["report"]},{"url":"https://bugzilla.suse.com/1276563","tags":["report"]},{"url":"https://bugzilla.suse.com/1276565","tags":["report"]},{"url":"https://bugzilla.suse.com/1276570","tags":["report"]},{"url":"https://bugzilla.suse.com/1276572","tags":["report"]},{"url":"https://bugzilla.suse.com/1276573","tags":["report"]},{"url":"https://bugzilla.suse.com/1276579","tags":["report"]},{"url":"https://bugzilla.suse.com/1276766","tags":["report"]},{"url":"https://bugzilla.suse.com/1276767","tags":["report"]},{"url":"https://bugzilla.suse.com/1276783","tags":["report"]},{"url":"https://bugzilla.suse.com/1276793","tags":["report"]},{"url":"https://bugzilla.suse.com/1276801","tags":["report"]},{"url":"https://bugzilla.suse.com/1276803","tags":["report"]},{"url":"https://bugzilla.suse.com/1276814","tags":["report"]},{"url":"https://bugzilla.suse.com/1276818","tags":["report"]},{"url":"https://bugzilla.suse.com/1276821","tags":["report"]},{"url":"https://bugzilla.suse.com/1276840","tags":["report"]},{"url":"https://bugzilla.suse.com/1276865","tags":["report"]},{"url":"https://bugzilla.suse.com/1276866","tags":["report"]},{"url":"https://bugzilla.suse.com/1276876","tags":["report"]},{"url":"https://bugzilla.suse.com/1276880","tags":["report"]},{"url":"https://bugzilla.suse.com/1276891","tags":["report"]},{"url":"https://bugzilla.suse.com/1276905","tags":["report"]},{"url":"https://bugzilla.suse.com/1276921","tags":["report"]},{"url":"https://bugzilla.suse.com/1276922","tags":["report"]},{"url":"https://bugzilla.suse.com/1276923","tags":["report"]},{"url":"https://bugzilla.suse.com/1276930","tags":["report"]},{"url":"https://bugzilla.suse.com/1277023","tags":["report"]},{"url":"https://bugzilla.suse.com/1277030","tags":["report"]},{"url":"https://bugzilla.suse.com/1277032","tags":["report"]},{"url":"https://bugzilla.suse.com/1277036","tags":["report"]},{"url":"https://bugzilla.suse.com/1277070","tags":["report"]},{"url":"https://bugzilla.suse.com/1277078","tags":["report"]},{"url":"https://bugzilla.suse.com/1277092","tags":["report"]},{"url":"https://bugzilla.suse.com/1277098","tags":["report"]},{"url":"https://bugzilla.suse.com/1277108","tags":["report"]},{"url":"https://bugzilla.suse.com/1277109","tags":["report"]},{"url":"https://bugzilla.suse.com/1277114","tags":["report"]},{"url":"https://bugzilla.suse.com/1277115","tags":["report"]},{"url":"https://bugzilla.suse.com/1277120","tags":["report"]},{"url":"https://bugzilla.suse.com/1277122","tags":["report"]},{"url":"https://bugzilla.suse.com/1277128","tags":["report"]},{"url":"https://bugzilla.suse.com/1277129","tags":["report"]},{"url":"https://bugzilla.suse.com/1277143","tags":["report"]},{"url":"https://bugzilla.suse.com/1277148","tags":["report"]},{"url":"https://bugzilla.suse.com/1277149","tags":["report"]},{"url":"https://bugzilla.suse.com/1277179","tags":["report"]},{"url":"https://bugzilla.suse.com/1277215","tags":["report"]},{"url":"https://bugzilla.suse.com/1277217","tags":["report"]},{"url":"https://bugzilla.suse.com/1277218","tags":["report"]},{"url":"https://bugzilla.suse.com/1277229","tags":["report"]},{"url":"https://bugzilla.suse.com/1277231","tags":["report"]},{"url":"https://bugzilla.suse.com/1277233","tags":["report"]},{"url":"https://bugzilla.suse.com/1277235","tags":["report"]},{"url":"https://bugzilla.suse.com/1277245","tags":["report"]},{"url":"https://bugzilla.suse.com/1277249","tags":["report"]},{"url":"https://bugzilla.suse.com/1277254","tags":["report"]},{"url":"https://bugzilla.suse.com/1277268","tags":["report"]},{"url":"https://bugzilla.suse.com/1277272","tags":["report"]},{"url":"https://bugzilla.suse.com/1277296","tags":["report"]},{"url":"https://bugzilla.suse.com/1277308","tags":["report"]},{"url":"https://bugzilla.suse.com/1277314","tags":["report"]},{"url":"https://bugzilla.suse.com/1277321","tags":["report"]},{"url":"https://bugzilla.suse.com/1277328","tags":["report"]},{"url":"https://bugzilla.suse.com/1277335","tags":["report"]},{"url":"https://bugzilla.suse.com/1277342","tags":["report"]},{"url":"https://bugzilla.suse.com/1277349","tags":["report"]},{"url":"https://bugzilla.suse.com/1277350","tags":["report"]},{"url":"https://bugzilla.suse.com/1277371","tags":["report"]},{"url":"https://bugzilla.suse.com/1277372","tags":["report"]},{"url":"https://bugzilla.suse.com/1277374","tags":["report"]},{"url":"https://bugzilla.suse.com/1277392","tags":["report"]},{"url":"https://bugzilla.suse.com/1277396","tags":["report"]},{"url":"https://bugzilla.suse.com/1277401","tags":["report"]},{"url":"https://bugzilla.suse.com/1277405","tags":["report"]},{"url":"https://bugzilla.suse.com/1277410","tags":["report"]},{"url":"https://bugzilla.suse.com/1277452","tags":["report"]},{"url":"https://bugzilla.suse.com/1277489","tags":["report"]},{"url":"https://bugzilla.suse.com/1277493","tags":["report"]},{"url":"https://bugzilla.suse.com/1277505","tags":["report"]},{"url":"https://bugzilla.suse.com/1277513","tags":["report"]},{"url":"https://bugzilla.suse.com/1277544","tags":["report"]},{"url":"https://bugzilla.suse.com/1277553","tags":["report"]},{"url":"https://bugzilla.suse.com/1277555","tags":["report"]},{"url":"https://bugzilla.suse.com/1277556","tags":["report"]},{"url":"https://bugzilla.suse.com/1277557","tags":["report"]},{"url":"https://bugzilla.suse.com/1277558","tags":["report"]},{"url":"https://bugzilla.suse.com/1277561","tags":["report"]},{"url":"https://bugzilla.suse.com/1277571","tags":["report"]},{"url":"https://bugzilla.suse.com/1277574","tags":["report"]},{"url":"https://bugzilla.suse.com/1277590","tags":["report"]},{"url":"https://bugzilla.suse.com/1277615","tags":["report"]},{"url":"https://bugzilla.suse.com/1277626","tags":["report"]},{"url":"https://bugzilla.suse.com/1277640","tags":["report"]},{"url":"https://bugzilla.suse.com/1277649","tags":["report"]},{"url":"https://bugzilla.suse.com/1277655","tags":["report"]},{"url":"https://bugzilla.suse.com/1277656","tags":["report"]},{"url":"https://bugzilla.suse.com/1277662","tags":["report"]},{"url":"https://bugzilla.suse.com/1277674","tags":["report"]},{"url":"https://bugzilla.suse.com/1277705","tags":["report"]},{"url":"https://bugzilla.suse.com/1277728","tags":["report"]},{"url":"https://bugzilla.suse.com/1277738","tags":["report"]},{"url":"https://bugzilla.suse.com/1277748","tags":["report"]},{"url":"https://bugzilla.suse.com/1277761","tags":["report"]},{"url":"https://bugzilla.suse.com/1277764","tags":["report"]},{"url":"https://bugzilla.suse.com/1277766","tags":["report"]},{"url":"https://bugzilla.suse.com/1277781","tags":["report"]},{"url":"https://bugzilla.suse.com/1277783","tags":["report"]},{"url":"https://bugzilla.suse.com/1277784","tags":["report"]},{"url":"https://bugzilla.suse.com/1277792","tags":["report"]},{"url":"https://bugzilla.suse.com/1277796","tags":["report"]},{"url":"https://bugzilla.suse.com/1277801","tags":["report"]},{"url":"https://bugzilla.suse.com/1277805","tags":["report"]},{"url":"https://bugzilla.suse.com/1277813","tags":["report"]},{"url":"https://bugzilla.suse.com/1277818","tags":["report"]},{"url":"https://bugzilla.suse.com/1277820","tags":["report"]},{"url":"https://bugzilla.suse.com/1277822","tags":["report"]},{"url":"https://bugzilla.suse.com/1277823","tags":["report"]},{"url":"https://bugzilla.suse.com/1277837","tags":["report"]},{"url":"https://bugzilla.suse.com/1277840","tags":["report"]},{"url":"https://bugzilla.suse.com/1277843","tags":["report"]},{"url":"https://bugzilla.suse.com/1277857","tags":["report"]},{"url":"https://bugzilla.suse.com/1277860","tags":["report"]},{"url":"https://bugzilla.suse.com/1277862","tags":["report"]},{"url":"https://bugzilla.suse.com/1277874","tags":["report"]},{"url":"https://bugzilla.suse.com/1277876","tags":["report"]},{"url":"https://bugzilla.suse.com/1277885","tags":["report"]},{"url":"https://bugzilla.suse.com/1277892","tags":["report"]},{"url":"https://bugzilla.suse.com/1277896","tags":["report"]},{"url":"https://bugzilla.suse.com/1277897","tags":["report"]},{"url":"https://bugzilla.suse.com/1277898","tags":["report"]},{"url":"https://bugzilla.suse.com/1277900","tags":["report"]},{"url":"https://bugzilla.suse.com/1277901","tags":["report"]},{"url":"https://bugzilla.suse.com/1277904","tags":["report"]},{"url":"https://bugzilla.suse.com/1277906","tags":["report"]},{"url":"https://bugzilla.suse.com/1277908","tags":["report"]},{"url":"https://bugzilla.suse.com/1277910","tags":["report"]},{"url":"https://bugzilla.suse.com/1277915","tags":["report"]},{"url":"https://bugzilla.suse.com/1277918","tags":["report"]},{"url":"https://bugzilla.suse.com/1278031","tags":["report"]},{"url":"https://bugzilla.suse.com/1278035","tags":["report"]},{"url":"https://bugzilla.suse.com/1278053","tags":["report"]},{"url":"https://bugzilla.suse.com/1278054","tags":["report"]},{"url":"https://bugzilla.suse.com/1278056","tags":["report"]},{"url":"https://bugzilla.suse.com/1278063","tags":["report"]},{"url":"https://bugzilla.suse.com/1278067","tags":["report"]},{"url":"https://bugzilla.suse.com/1278070","tags":["report"]},{"url":"https://bugzilla.suse.com/1278087","tags":["report"]},{"url":"https://bugzilla.suse.com/1278088","tags":["report"]},{"url":"https://bugzilla.suse.com/1278091","tags":["report"]},{"url":"https://bugzilla.suse.com/1278094","tags":["report"]},{"url":"https://bugzilla.suse.com/1278098","tags":["report"]},{"url":"https://bugzilla.suse.com/1278100","tags":["report"]},{"url":"https://bugzilla.suse.com/1278108","tags":["report"]},{"url":"https://bugzilla.suse.com/1278113","tags":["report"]},{"url":"https://bugzilla.suse.com/1278132","tags":["report"]},{"url":"https://bugzilla.suse.com/1278155","tags":["report"]},{"url":"https://bugzilla.suse.com/1278178","tags":["report"]},{"url":"https://bugzilla.suse.com/1278180","tags":["report"]},{"url":"https://bugzilla.suse.com/1278191","tags":["report"]},{"url":"https://bugzilla.suse.com/1278195","tags":["report"]},{"url":"https://bugzilla.suse.com/1278199","tags":["report"]},{"url":"https://bugzilla.suse.com/1278205","tags":["report"]},{"url":"https://bugzilla.suse.com/1278210","tags":["report"]},{"url":"https://bugzilla.suse.com/1278211","tags":["report"]},{"url":"https://bugzilla.suse.com/1278216","tags":["report"]},{"url":"https://bugzilla.suse.com/1278225","tags":["report"]},{"url":"https://bugzilla.suse.com/1278233","tags":["report"]},{"url":"https://bugzilla.suse.com/1278236","tags":["report"]},{"url":"https://bugzilla.suse.com/1278240","tags":["report"]},{"url":"https://bugzilla.suse.com/1278245","tags":["report"]},{"url":"https://bugzilla.suse.com/1278247","tags":["report"]},{"url":"https://bugzilla.suse.com/1278253","tags":["report"]},{"url":"https://bugzilla.suse.com/1278255","tags":["report"]},{"url":"https://bugzilla.suse.com/1278293","tags":["report"]},{"url":"https://bugzilla.suse.com/1278294","tags":["report"]},{"url":"https://bugzilla.suse.com/1278311","tags":["report"]},{"url":"https://bugzilla.suse.com/1278314","tags":["report"]},{"url":"https://bugzilla.suse.com/1278315","tags":["report"]},{"url":"https://bugzilla.suse.com/1278324","tags":["report"]},{"url":"https://bugzilla.suse.com/1278331","tags":["report"]},{"url":"https://bugzilla.suse.com/1278335","tags":["report"]},{"url":"https://bugzilla.suse.com/1278395","tags":["report"]},{"url":"https://bugzilla.suse.com/1278416","tags":["report"]},{"url":"https://bugzilla.suse.com/1278708","tags":["report"]},{"url":"https://bugzilla.suse.com/1278716","tags":["report"]},{"url":"https://bugzilla.suse.com/1278733","tags":["report"]},{"url":"https://bugzilla.suse.com/1279422","tags":["report"]},{"url":"https://bugzilla.suse.com/1279487","tags":["report"]},{"url":"https://bugzilla.suse.com/1279497","tags":["report"]},{"url":"https://bugzilla.suse.com/1279525","tags":["report"]},{"url":"https://bugzilla.suse.com/1279527","tags":["report"]},{"url":"https://bugzilla.suse.com/1279532","tags":["report"]},{"url":"https://bugzilla.suse.com/1279535","tags":["report"]},{"url":"https://bugzilla.suse.com/1279536","tags":["report"]},{"url":"https://bugzilla.suse.com/1279580","tags":["report"]},{"url":"https://bugzilla.suse.com/1279581","tags":["report"]},{"url":"https://bugzilla.suse.com/1279619","tags":["report"]},{"url":"https://bugzilla.suse.com/1279621","tags":["report"]},{"url":"https://bugzilla.suse.com/1279786","tags":["report"]},{"url":"https://bugzilla.suse.com/1279799","tags":["report"]},{"url":"https://bugzilla.suse.com/1279811","tags":["report"]},{"url":"https://bugzilla.suse.com/1279813","tags":["report"]},{"url":"https://bugzilla.suse.com/1279819","tags":["report"]},{"url":"https://bugzilla.suse.com/1279835","tags":["report"]},{"url":"https://bugzilla.suse.com/1279847","tags":["report"]},{"url":"https://bugzilla.suse.com/1279850","tags":["report"]},{"url":"https://bugzilla.suse.com/1279875","tags":["report"]},{"url":"https://bugzilla.suse.com/1279878","tags":["report"]},{"url":"https://bugzilla.suse.com/1279888","tags":["report"]},{"url":"https://bugzilla.suse.com/1280139","tags":["report"]},{"url":"https://bugzilla.suse.com/1280143","tags":["report"]},{"url":"https://bugzilla.suse.com/1280146","tags":["report"]},{"url":"https://bugzilla.suse.com/1280148","tags":["report"]},{"url":"https://bugzilla.suse.com/1280151","tags":["report"]},{"url":"https://bugzilla.suse.com/1280178","tags":["report"]},{"url":"https://bugzilla.suse.com/1280184","tags":["report"]},{"url":"https://bugzilla.suse.com/1280206","tags":["report"]},{"url":"https://bugzilla.suse.com/1280235","tags":["report"]},{"url":"https://bugzilla.suse.com/1280237","tags":["report"]},{"url":"https://bugzilla.suse.com/1280243","tags":["report"]},{"url":"https://bugzilla.suse.com/1280252","tags":["report"]},{"url":"https://bugzilla.suse.com/1280263","tags":["report"]},{"url":"https://bugzilla.suse.com/1280296","tags":["report"]},{"url":"https://bugzilla.suse.com/1280298","tags":["report"]},{"url":"https://bugzilla.suse.com/1280338","tags":["report"]},{"url":"https://bugzilla.suse.com/1280350","tags":["report"]},{"url":"https://bugzilla.suse.com/1280375","tags":["report"]},{"url":"https://bugzilla.suse.com/1280379","tags":["report"]},{"url":"https://bugzilla.suse.com/1280383","tags":["report"]},{"url":"https://bugzilla.suse.com/1280387","tags":["report"]},{"url":"https://bugzilla.suse.com/1280388","tags":["report"]},{"url":"https://bugzilla.suse.com/1280449","tags":["report"]},{"url":"https://bugzilla.suse.com/1280451","tags":["report"]},{"url":"https://bugzilla.suse.com/1280455","tags":["report"]},{"url":"https://bugzilla.suse.com/1280456","tags":["report"]},{"url":"https://bugzilla.suse.com/1280468","tags":["report"]},{"url":"https://bugzilla.suse.com/1280487","tags":["report"]},{"url":"https://bugzilla.suse.com/1280490","tags":["report"]},{"url":"https://bugzilla.suse.com/1280496","tags":["report"]},{"url":"https://bugzilla.suse.com/1280508","tags":["report"]},{"url":"https://bugzilla.suse.com/1280509","tags":["report"]},{"url":"https://bugzilla.suse.com/1280518","tags":["report"]},{"url":"https://bugzilla.suse.com/1280544","tags":["report"]},{"url":"https://bugzilla.suse.com/1280546","tags":["report"]},{"url":"https://bugzilla.suse.com/1280548","tags":["report"]},{"url":"https://bugzilla.suse.com/1280551","tags":["report"]},{"url":"https://bugzilla.suse.com/1280577","tags":["report"]},{"url":"https://bugzilla.suse.com/1280711","tags":["report"]},{"url":"https://bugzilla.suse.com/1280716","tags":["report"]},{"url":"https://bugzilla.suse.com/1280717","tags":["report"]},{"url":"https://bugzilla.suse.com/1280719","tags":["report"]},{"url":"https://bugzilla.suse.com/1280726","tags":["report"]},{"url":"https://bugzilla.suse.com/1280727","tags":["report"]},{"url":"https://bugzilla.suse.com/1280733","tags":["report"]},{"url":"https://bugzilla.suse.com/1280750","tags":["report"]},{"url":"https://bugzilla.suse.com/1280758","tags":["report"]},{"url":"https://bugzilla.suse.com/1280786","tags":["report"]},{"url":"https://bugzilla.suse.com/1280797","tags":["report"]},{"url":"https://bugzilla.suse.com/1280870","tags":["report"]},{"url":"https://bugzilla.suse.com/1280872","tags":["report"]},{"url":"https://bugzilla.suse.com/1280923","tags":["report"]},{"url":"https://bugzilla.suse.com/1280985","tags":["report"]},{"url":"https://bugzilla.suse.com/1280993","tags":["report"]},{"url":"https://bugzilla.suse.com/1281010","tags":["report"]},{"url":"https://bugzilla.suse.com/1281042","tags":["report"]},{"url":"https://bugzilla.suse.com/1281046","tags":["report"]},{"url":"https://bugzilla.suse.com/1281054","tags":["report"]},{"url":"https://bugzilla.suse.com/1281057","tags":["report"]},{"url":"https://bugzilla.suse.com/1281077","tags":["report"]},{"url":"https://bugzilla.suse.com/1281085","tags":["report"]},{"url":"https://bugzilla.suse.com/1281201","tags":["report"]},{"url":"https://bugzilla.suse.com/1281202","tags":["report"]},{"url":"https://bugzilla.suse.com/1281224","tags":["report"]},{"url":"https://bugzilla.suse.com/1281226","tags":["report"]},{"url":"https://bugzilla.suse.com/1281229","tags":["report"]},{"url":"https://bugzilla.suse.com/1281231","tags":["report"]},{"url":"https://bugzilla.suse.com/1281273","tags":["report"]},{"url":"https://bugzilla.suse.com/1281295","tags":["report"]},{"url":"https://bugzilla.suse.com/1281358","tags":["report"]},{"url":"https://bugzilla.suse.com/1281359","tags":["report"]},{"url":"https://bugzilla.suse.com/1281379","tags":["report"]},{"url":"https://bugzilla.suse.com/1281383","tags":["report"]},{"url":"https://bugzilla.suse.com/1281387","tags":["report"]},{"url":"https://bugzilla.suse.com/1281397","tags":["report"]},{"url":"https://bugzilla.suse.com/1281399","tags":["report"]},{"url":"https://bugzilla.suse.com/1281408","tags":["report"]},{"url":"https://bugzilla.suse.com/1281427","tags":["report"]},{"url":"https://bugzilla.suse.com/1281496","tags":["report"]},{"url":"https://bugzilla.suse.com/1281514","tags":["report"]},{"url":"https://bugzilla.suse.com/1281546","tags":["report"]},{"url":"https://bugzilla.suse.com/1281599","tags":["report"]},{"url":"https://bugzilla.suse.com/1281644","tags":["report"]},{"url":"https://bugzilla.suse.com/1281680","tags":["report"]},{"url":"https://bugzilla.suse.com/1281694","tags":["report"]},{"url":"https://bugzilla.suse.com/1281717","tags":["report"]},{"url":"https://bugzilla.suse.com/1281732","tags":["report"]},{"url":"https://bugzilla.suse.com/1281738","tags":["report"]},{"url":"https://bugzilla.suse.com/1281777","tags":["report"]},{"url":"https://bugzilla.suse.com/1281778","tags":["report"]},{"url":"https://bugzilla.suse.com/1281786","tags":["report"]},{"url":"https://bugzilla.suse.com/1281789","tags":["report"]},{"url":"https://bugzilla.suse.com/1281793","tags":["report"]},{"url":"https://bugzilla.suse.com/1281795","tags":["report"]},{"url":"https://bugzilla.suse.com/1281808","tags":["report"]},{"url":"https://bugzilla.suse.com/1281818","tags":["report"]},{"url":"https://bugzilla.suse.com/1281825","tags":["report"]},{"url":"https://bugzilla.suse.com/1281922","tags":["report"]},{"url":"https://bugzilla.suse.com/1281927","tags":["report"]},{"url":"https://bugzilla.suse.com/1281955","tags":["report"]},{"url":"https://bugzilla.suse.com/1281964","tags":["report"]},{"url":"https://bugzilla.suse.com/1281973","tags":["report"]},{"url":"https://bugzilla.suse.com/1281988","tags":["report"]},{"url":"https://bugzilla.suse.com/1281993","tags":["report"]},{"url":"https://bugzilla.suse.com/1281995","tags":["report"]},{"url":"https://bugzilla.suse.com/1281997","tags":["report"]},{"url":"https://bugzilla.suse.com/1282020","tags":["report"]},{"url":"https://bugzilla.suse.com/1282034","tags":["report"]},{"url":"https://bugzilla.suse.com/1282040","tags":["report"]},{"url":"https://bugzilla.suse.com/1282041","tags":["report"]},{"url":"https://bugzilla.suse.com/1282042","tags":["report"]},{"url":"https://bugzilla.suse.com/1282050","tags":["report"]},{"url":"https://bugzilla.suse.com/1282054","tags":["report"]},{"url":"https://bugzilla.suse.com/1282072","tags":["report"]},{"url":"https://bugzilla.suse.com/1282104","tags":["report"]},{"url":"https://bugzilla.suse.com/1282110","tags":["report"]},{"url":"https://bugzilla.suse.com/1282113","tags":["report"]},{"url":"https://bugzilla.suse.com/1282143","tags":["report"]},{"url":"https://bugzilla.suse.com/1282170","tags":["report"]},{"url":"https://bugzilla.suse.com/1282193","tags":["report"]},{"url":"https://bugzilla.suse.com/1282197","tags":["report"]},{"url":"https://bugzilla.suse.com/1282270","tags":["report"]},{"url":"https://bugzilla.suse.com/1282271","tags":["report"]},{"url":"https://bugzilla.suse.com/1282284","tags":["report"]},{"url":"https://bugzilla.suse.com/1282286","tags":["report"]},{"url":"https://bugzilla.suse.com/1282288","tags":["report"]},{"url":"https://bugzilla.suse.com/1282383","tags":["report"]},{"url":"https://bugzilla.suse.com/1282648","tags":["report"]},{"url":"https://bugzilla.suse.com/1282672","tags":["report"]},{"url":"https://bugzilla.suse.com/1282767","tags":["report"]},{"url":"https://bugzilla.suse.com/1282774","tags":["report"]},{"url":"https://bugzilla.suse.com/1282803","tags":["report"]},{"url":"https://bugzilla.suse.com/1282810","tags":["report"]},{"url":"https://bugzilla.suse.com/1282812","tags":["report"]},{"url":"https://bugzilla.suse.com/1282823","tags":["report"]},{"url":"https://bugzilla.suse.com/1282881","tags":["report"]},{"url":"https://bugzilla.suse.com/1282891","tags":["report"]},{"url":"https://bugzilla.suse.com/1282906","tags":["report"]},{"url":"https://bugzilla.suse.com/1282997","tags":["report"]},{"url":"https://bugzilla.suse.com/1283121","tags":["report"]},{"url":"https://bugzilla.suse.com/1283154","tags":["report"]},{"url":"https://bugzilla.suse.com/1283163","tags":["report"]},{"url":"https://bugzilla.suse.com/1283176","tags":["report"]},{"url":"https://bugzilla.suse.com/1283201","tags":["report"]},{"url":"https://bugzilla.suse.com/1283213","tags":["report"]},{"url":"https://bugzilla.suse.com/1283230","tags":["report"]},{"url":"https://bugzilla.suse.com/1283312","tags":["report"]},{"url":"https://bugzilla.suse.com/1283500","tags":["report"]},{"url":"https://bugzilla.suse.com/1283805","tags":["report"]},{"url":"https://bugzilla.suse.com/1283935","tags":["report"]},{"url":"https://bugzilla.suse.com/1283973","tags":["report"]},{"url":"https://bugzilla.suse.com/1284146","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98164","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624182-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1266008","tags":["report"]},{"url":"https://bugzilla.suse.com/1269532","tags":["report"]},{"url":"https://bugzilla.suse.com/1271955","tags":["report"]},{"url":"https://bugzilla.suse.com/1274920","tags":["report"]},{"url":"https://bugzilla.suse.com/1275540","tags":["report"]},{"url":"https://bugzilla.suse.com/1276277","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72084","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624315-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624316-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264279-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235944","tags":["report"]},{"url":"https://bugzilla.suse.com/1242405","tags":["report"]},{"url":"https://bugzilla.suse.com/1261604","tags":["report"]},{"url":"https://bugzilla.suse.com/1263072","tags":["report"]},{"url":"https://bugzilla.suse.com/1264734","tags":["report"]},{"url":"https://bugzilla.suse.com/1267023","tags":["report"]},{"url":"https://bugzilla.suse.com/1268659","tags":["report"]},{"url":"https://bugzilla.suse.com/1269004","tags":["report"]},{"url":"https://bugzilla.suse.com/1269238","tags":["report"]},{"url":"https://bugzilla.suse.com/1269242","tags":["report"]},{"url":"https://bugzilla.suse.com/1269306","tags":["report"]},{"url":"https://bugzilla.suse.com/1269655","tags":["report"]},{"url":"https://bugzilla.suse.com/1269731","tags":["report"]},{"url":"https://bugzilla.suse.com/1271825","tags":["report"]},{"url":"https://bugzilla.suse.com/1271830","tags":["report"]},{"url":"https://bugzilla.suse.com/1272179","tags":["report"]},{"url":"https://bugzilla.suse.com/1272182","tags":["report"]},{"url":"https://bugzilla.suse.com/1272230","tags":["report"]},{"url":"https://bugzilla.suse.com/1272385","tags":["report"]},{"url":"https://bugzilla.suse.com/1272390","tags":["report"]},{"url":"https://bugzilla.suse.com/1272868","tags":["report"]},{"url":"https://bugzilla.suse.com/1272877","tags":["report"]},{"url":"https://bugzilla.suse.com/1273060","tags":["report"]},{"url":"https://bugzilla.suse.com/1273105","tags":["report"]},{"url":"https://bugzilla.suse.com/1273276","tags":["report"]},{"url":"https://bugzilla.suse.com/1273303","tags":["report"]},{"url":"https://bugzilla.suse.com/1273311","tags":["report"]},{"url":"https://bugzilla.suse.com/1273422","tags":["report"]},{"url":"https://bugzilla.suse.com/1273484","tags":["report"]},{"url":"https://bugzilla.suse.com/1273488","tags":["report"]},{"url":"https://bugzilla.suse.com/1273523","tags":["report"]},{"url":"https://bugzilla.suse.com/1273555","tags":["report"]},{"url":"https://bugzilla.suse.com/1273742","tags":["report"]},{"url":"https://bugzilla.suse.com/1273745","tags":["report"]},{"url":"https://bugzilla.suse.com/1273748","tags":["report"]},{"url":"https://bugzilla.suse.com/1273762","tags":["report"]},{"url":"https://bugzilla.suse.com/1273774","tags":["report"]},{"url":"https://bugzilla.suse.com/1273869","tags":["report"]},{"url":"https://bugzilla.suse.com/1273882","tags":["report"]},{"url":"https://bugzilla.suse.com/1273891","tags":["report"]},{"url":"https://bugzilla.suse.com/1273930","tags":["report"]},{"url":"https://bugzilla.suse.com/1273944","tags":["report"]},{"url":"https://bugzilla.suse.com/1273966","tags":["report"]},{"url":"https://bugzilla.suse.com/1273995","tags":["report"]},{"url":"https://bugzilla.suse.com/1274014","tags":["report"]},{"url":"https://bugzilla.suse.com/1274041","tags":["report"]},{"url":"https://bugzilla.suse.com/1274208","tags":["report"]},{"url":"https://bugzilla.suse.com/1274274","tags":["report"]},{"url":"https://bugzilla.suse.com/1274497","tags":["report"]},{"url":"https://bugzilla.suse.com/1274547","tags":["report"]},{"url":"https://bugzilla.suse.com/1274550","tags":["report"]},{"url":"https://bugzilla.suse.com/1274696","tags":["report"]},{"url":"https://bugzilla.suse.com/1274705","tags":["report"]},{"url":"https://bugzilla.suse.com/1274752","tags":["report"]},{"url":"https://bugzilla.suse.com/1274753","tags":["report"]},{"url":"https://bugzilla.suse.com/1274754","tags":["report"]},{"url":"https://bugzilla.suse.com/1274859","tags":["report"]},{"url":"https://bugzilla.suse.com/1274888","tags":["report"]},{"url":"https://bugzilla.suse.com/1274898","tags":["report"]},{"url":"https://bugzilla.suse.com/1274902","tags":["report"]},{"url":"https://bugzilla.suse.com/1274908","tags":["report"]},{"url":"https://bugzilla.suse.com/1274941","tags":["report"]},{"url":"https://bugzilla.suse.com/1275161","tags":["report"]},{"url":"https://bugzilla.suse.com/1275304","tags":["report"]},{"url":"https://bugzilla.suse.com/1275307","tags":["report"]},{"url":"https://bugzilla.suse.com/1275470","tags":["report"]},{"url":"https://bugzilla.suse.com/1275472","tags":["report"]},{"url":"https://bugzilla.suse.com/1275474","tags":["report"]},{"url":"https://bugzilla.suse.com/1275506","tags":["report"]},{"url":"https://bugzilla.suse.com/1275528","tags":["report"]},{"url":"https://bugzilla.suse.com/1275535","tags":["report"]},{"url":"https://bugzilla.suse.com/1275687","tags":["report"]},{"url":"https://bugzilla.suse.com/1275696","tags":["report"]},{"url":"https://bugzilla.suse.com/1275784","tags":["report"]},{"url":"https://bugzilla.suse.com/1275798","tags":["report"]},{"url":"https://bugzilla.suse.com/1275827","tags":["report"]},{"url":"https://bugzilla.suse.com/1275867","tags":["report"]},{"url":"https://bugzilla.suse.com/1275886","tags":["report"]},{"url":"https://bugzilla.suse.com/1275905","tags":["report"]},{"url":"https://bugzilla.suse.com/1276350","tags":["report"]},{"url":"https://bugzilla.suse.com/1276665","tags":["report"]},{"url":"https://bugzilla.suse.com/1276931","tags":["report"]},{"url":"https://bugzilla.suse.com/1277073","tags":["report"]},{"url":"https://bugzilla.suse.com/1277285","tags":["report"]},{"url":"https://bugzilla.suse.com/1277391","tags":["report"]},{"url":"https://bugzilla.suse.com/1277408","tags":["report"]},{"url":"https://bugzilla.suse.com/1277523","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-57841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74695","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264282-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224586","tags":["report"]},{"url":"https://bugzilla.suse.com/1251966","tags":["report"]},{"url":"https://bugzilla.suse.com/1252682","tags":["report"]},{"url":"https://bugzilla.suse.com/1254894","tags":["report"]},{"url":"https://bugzilla.suse.com/1255225","tags":["report"]},{"url":"https://bugzilla.suse.com/1257246","tags":["report"]},{"url":"https://bugzilla.suse.com/1261679","tags":["report"]},{"url":"https://bugzilla.suse.com/1262771","tags":["report"]},{"url":"https://bugzilla.suse.com/1264296","tags":["report"]},{"url":"https://bugzilla.suse.com/1264308","tags":["report"]},{"url":"https://bugzilla.suse.com/1264541","tags":["report"]},{"url":"https://bugzilla.suse.com/1264594","tags":["report"]},{"url":"https://bugzilla.suse.com/1264619","tags":["report"]},{"url":"https://bugzilla.suse.com/1264821","tags":["report"]},{"url":"https://bugzilla.suse.com/1265068","tags":["report"]},{"url":"https://bugzilla.suse.com/1265121","tags":["report"]},{"url":"https://bugzilla.suse.com/1266920","tags":["report"]},{"url":"https://bugzilla.suse.com/1267501","tags":["report"]},{"url":"https://bugzilla.suse.com/1267612","tags":["report"]},{"url":"https://bugzilla.suse.com/1267615","tags":["report"]},{"url":"https://bugzilla.suse.com/1267643","tags":["report"]},{"url":"https://bugzilla.suse.com/1268972","tags":["report"]},{"url":"https://bugzilla.suse.com/1268987","tags":["report"]},{"url":"https://bugzilla.suse.com/1269013","tags":["report"]},{"url":"https://bugzilla.suse.com/1269113","tags":["report"]},{"url":"https://bugzilla.suse.com/1269114","tags":["report"]},{"url":"https://bugzilla.suse.com/1269256","tags":["report"]},{"url":"https://bugzilla.suse.com/1269301","tags":["report"]},{"url":"https://bugzilla.suse.com/1269381","tags":["report"]},{"url":"https://bugzilla.suse.com/1269412","tags":["report"]},{"url":"https://bugzilla.suse.com/1269530","tags":["report"]},{"url":"https://bugzilla.suse.com/1269686","tags":["report"]},{"url":"https://bugzilla.suse.com/1269733","tags":["report"]},{"url":"https://bugzilla.suse.com/1269734","tags":["report"]},{"url":"https://bugzilla.suse.com/1269774","tags":["report"]},{"url":"https://bugzilla.suse.com/1269783","tags":["report"]},{"url":"https://bugzilla.suse.com/1269815","tags":["report"]},{"url":"https://bugzilla.suse.com/1270264","tags":["report"]},{"url":"https://bugzilla.suse.com/1271731","tags":["report"]},{"url":"https://bugzilla.suse.com/1271827","tags":["report"]},{"url":"https://bugzilla.suse.com/1272210","tags":["report"]},{"url":"https://bugzilla.suse.com/1272262","tags":["report"]},{"url":"https://bugzilla.suse.com/1272297","tags":["report"]},{"url":"https://bugzilla.suse.com/1272429","tags":["report"]},{"url":"https://bugzilla.suse.com/1272482","tags":["report"]},{"url":"https://bugzilla.suse.com/1272497","tags":["report"]},{"url":"https://bugzilla.suse.com/1272591","tags":["report"]},{"url":"https://bugzilla.suse.com/1272641","tags":["report"]},{"url":"https://bugzilla.suse.com/1272643","tags":["report"]},{"url":"https://bugzilla.suse.com/1272891","tags":["report"]},{"url":"https://bugzilla.suse.com/1273027","tags":["report"]},{"url":"https://bugzilla.suse.com/1273285","tags":["report"]},{"url":"https://bugzilla.suse.com/1273305","tags":["report"]},{"url":"https://bugzilla.suse.com/1273316","tags":["report"]},{"url":"https://bugzilla.suse.com/1273319","tags":["report"]},{"url":"https://bugzilla.suse.com/1273327","tags":["report"]},{"url":"https://bugzilla.suse.com/1273336","tags":["report"]},{"url":"https://bugzilla.suse.com/1273463","tags":["report"]},{"url":"https://bugzilla.suse.com/1273557","tags":["report"]},{"url":"https://bugzilla.suse.com/1273597","tags":["report"]},{"url":"https://bugzilla.suse.com/1273734","tags":["report"]},{"url":"https://bugzilla.suse.com/1273749","tags":["report"]},{"url":"https://bugzilla.suse.com/1273778","tags":["report"]},{"url":"https://bugzilla.suse.com/1273780","tags":["report"]},{"url":"https://bugzilla.suse.com/1273813","tags":["report"]},{"url":"https://bugzilla.suse.com/1273831","tags":["report"]},{"url":"https://bugzilla.suse.com/1273860","tags":["report"]},{"url":"https://bugzilla.suse.com/1273892","tags":["report"]},{"url":"https://bugzilla.suse.com/1273895","tags":["report"]},{"url":"https://bugzilla.suse.com/1273933","tags":["report"]},{"url":"https://bugzilla.suse.com/1273936","tags":["report"]},{"url":"https://bugzilla.suse.com/1273939","tags":["report"]},{"url":"https://bugzilla.suse.com/1273940","tags":["report"]},{"url":"https://bugzilla.suse.com/1273942","tags":["report"]},{"url":"https://bugzilla.suse.com/1273946","tags":["report"]},{"url":"https://bugzilla.suse.com/1273957","tags":["report"]},{"url":"https://bugzilla.suse.com/1273958","tags":["report"]},{"url":"https://bugzilla.suse.com/1273968","tags":["report"]},{"url":"https://bugzilla.suse.com/1273974","tags":["report"]},{"url":"https://bugzilla.suse.com/1274003","tags":["report"]},{"url":"https://bugzilla.suse.com/1274006","tags":["report"]},{"url":"https://bugzilla.suse.com/1274019","tags":["report"]},{"url":"https://bugzilla.suse.com/1274028","tags":["report"]},{"url":"https://bugzilla.suse.com/1274040","tags":["report"]},{"url":"https://bugzilla.suse.com/1274077","tags":["report"]},{"url":"https://bugzilla.suse.com/1274277","tags":["report"]},{"url":"https://bugzilla.suse.com/1274278","tags":["report"]},{"url":"https://bugzilla.suse.com/1274581","tags":["report"]},{"url":"https://bugzilla.suse.com/1274645","tags":["report"]},{"url":"https://bugzilla.suse.com/1274646","tags":["report"]},{"url":"https://bugzilla.suse.com/1274651","tags":["report"]},{"url":"https://bugzilla.suse.com/1274659","tags":["report"]},{"url":"https://bugzilla.suse.com/1274662","tags":["report"]},{"url":"https://bugzilla.suse.com/1274665","tags":["report"]},{"url":"https://bugzilla.suse.com/1274678","tags":["report"]},{"url":"https://bugzilla.suse.com/1274681","tags":["report"]},{"url":"https://bugzilla.suse.com/1274699","tags":["report"]},{"url":"https://bugzilla.suse.com/1274700","tags":["report"]},{"url":"https://bugzilla.suse.com/1274710","tags":["report"]},{"url":"https://bugzilla.suse.com/1274725","tags":["report"]},{"url":"https://bugzilla.suse.com/1274737","tags":["report"]},{"url":"https://bugzilla.suse.com/1274800","tags":["report"]},{"url":"https://bugzilla.suse.com/1274801","tags":["report"]},{"url":"https://bugzilla.suse.com/1274804","tags":["report"]},{"url":"https://bugzilla.suse.com/1274834","tags":["report"]},{"url":"https://bugzilla.suse.com/1274873","tags":["report"]},{"url":"https://bugzilla.suse.com/1274881","tags":["report"]},{"url":"https://bugzilla.suse.com/1274896","tags":["report"]},{"url":"https://bugzilla.suse.com/1274953","tags":["report"]},{"url":"https://bugzilla.suse.com/1275083","tags":["report"]},{"url":"https://bugzilla.suse.com/1275088","tags":["report"]},{"url":"https://bugzilla.suse.com/1275125","tags":["report"]},{"url":"https://bugzilla.suse.com/1275164","tags":["report"]},{"url":"https://bugzilla.suse.com/1275169","tags":["report"]},{"url":"https://bugzilla.suse.com/1275301","tags":["report"]},{"url":"https://bugzilla.suse.com/1275303","tags":["report"]},{"url":"https://bugzilla.suse.com/1275305","tags":["report"]},{"url":"https://bugzilla.suse.com/1275517","tags":["report"]},{"url":"https://bugzilla.suse.com/1275583","tags":["report"]},{"url":"https://bugzilla.suse.com/1275650","tags":["report"]},{"url":"https://bugzilla.suse.com/1275688","tags":["report"]},{"url":"https://bugzilla.suse.com/1275695","tags":["report"]},{"url":"https://bugzilla.suse.com/1275704","tags":["report"]},{"url":"https://bugzilla.suse.com/1275810","tags":["report"]},{"url":"https://bugzilla.suse.com/1275864","tags":["report"]},{"url":"https://bugzilla.suse.com/1275870","tags":["report"]},{"url":"https://bugzilla.suse.com/1275871","tags":["report"]},{"url":"https://bugzilla.suse.com/1275923","tags":["report"]},{"url":"https://bugzilla.suse.com/1275950","tags":["report"]},{"url":"https://bugzilla.suse.com/1275970","tags":["report"]},{"url":"https://bugzilla.suse.com/1275976","tags":["report"]},{"url":"https://bugzilla.suse.com/1276343","tags":["report"]},{"url":"https://bugzilla.suse.com/1276346","tags":["report"]},{"url":"https://bugzilla.suse.com/1276363","tags":["report"]},{"url":"https://bugzilla.suse.com/1276446","tags":["report"]},{"url":"https://bugzilla.suse.com/1276452","tags":["report"]},{"url":"https://bugzilla.suse.com/1276479","tags":["report"]},{"url":"https://bugzilla.suse.com/1276502","tags":["report"]},{"url":"https://bugzilla.suse.com/1276517","tags":["report"]},{"url":"https://bugzilla.suse.com/1276542","tags":["report"]},{"url":"https://bugzilla.suse.com/1277022","tags":["report"]},{"url":"https://bugzilla.suse.com/1277034","tags":["report"]},{"url":"https://bugzilla.suse.com/1277057","tags":["report"]},{"url":"https://bugzilla.suse.com/1277066","tags":["report"]},{"url":"https://bugzilla.suse.com/1277089","tags":["report"]},{"url":"https://bugzilla.suse.com/1277095","tags":["report"]},{"url":"https://bugzilla.suse.com/1277275","tags":["report"]},{"url":"https://bugzilla.suse.com/1277329","tags":["report"]},{"url":"https://bugzilla.suse.com/1277522","tags":["report"]},{"url":"https://bugzilla.suse.com/1277637","tags":["report"]},{"url":"https://bugzilla.suse.com/1277730","tags":["report"]},{"url":"https://bugzilla.suse.com/1277893","tags":["report"]},{"url":"https://bugzilla.suse.com/1278334","tags":["report"]},{"url":"https://bugzilla.suse.com/1279499","tags":["report"]},{"url":"https://bugzilla.suse.com/1279607","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-39964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80819","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264284-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264347-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1269792","tags":["report"]},{"url":"https://bugzilla.suse.com/1272756","tags":["report"]},{"url":"https://bugzilla.suse.com/1274031","tags":["report"]},{"url":"https://bugzilla.suse.com/1275782","tags":["report"]},{"url":"https://bugzilla.suse.com/1277155","tags":["report"]},{"url":"https://bugzilla.suse.com/1277678","tags":["report"]},{"url":"https://bugzilla.suse.com/1279554","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74581","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264369-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230238","tags":["report"]},{"url":"https://bugzilla.suse.com/1247455","tags":["report"]},{"url":"https://bugzilla.suse.com/1250748","tags":["report"]},{"url":"https://bugzilla.suse.com/1254306","tags":["report"]},{"url":"https://bugzilla.suse.com/1255250","tags":["report"]},{"url":"https://bugzilla.suse.com/1256708","tags":["report"]},{"url":"https://bugzilla.suse.com/1257154","tags":["report"]},{"url":"https://bugzilla.suse.com/1258430","tags":["report"]},{"url":"https://bugzilla.suse.com/1258517","tags":["report"]},{"url":"https://bugzilla.suse.com/1260522","tags":["report"]},{"url":"https://bugzilla.suse.com/1261780","tags":["report"]},{"url":"https://bugzilla.suse.com/1264642","tags":["report"]},{"url":"https://bugzilla.suse.com/1265449","tags":["report"]},{"url":"https://bugzilla.suse.com/1265928","tags":["report"]},{"url":"https://bugzilla.suse.com/1266402","tags":["report"]},{"url":"https://bugzilla.suse.com/1269126","tags":["report"]},{"url":"https://bugzilla.suse.com/1269981","tags":["report"]},{"url":"https://bugzilla.suse.com/1269985","tags":["report"]},{"url":"https://bugzilla.suse.com/1271365","tags":["report"]},{"url":"https://bugzilla.suse.com/1271366","tags":["report"]},{"url":"https://bugzilla.suse.com/1272381","tags":["report"]},{"url":"https://bugzilla.suse.com/1272569","tags":["report"]},{"url":"https://bugzilla.suse.com/1272571","tags":["report"]},{"url":"https://bugzilla.suse.com/1272662","tags":["report"]},{"url":"https://bugzilla.suse.com/1272673","tags":["report"]},{"url":"https://bugzilla.suse.com/1272680","tags":["report"]},{"url":"https://bugzilla.suse.com/1272682","tags":["report"]},{"url":"https://bugzilla.suse.com/1272798","tags":["report"]},{"url":"https://bugzilla.suse.com/1273030","tags":["report"]},{"url":"https://bugzilla.suse.com/1273053","tags":["report"]},{"url":"https://bugzilla.suse.com/1273054","tags":["report"]},{"url":"https://bugzilla.suse.com/1273426","tags":["report"]},{"url":"https://bugzilla.suse.com/1273578","tags":["report"]},{"url":"https://bugzilla.suse.com/1273743","tags":["report"]},{"url":"https://bugzilla.suse.com/1273766","tags":["report"]},{"url":"https://bugzilla.suse.com/1273903","tags":["report"]},{"url":"https://bugzilla.suse.com/1274226","tags":["report"]},{"url":"https://bugzilla.suse.com/1274539","tags":["report"]},{"url":"https://bugzilla.suse.com/1274541","tags":["report"]},{"url":"https://bugzilla.suse.com/1274543","tags":["report"]},{"url":"https://bugzilla.suse.com/1274545","tags":["report"]},{"url":"https://bugzilla.suse.com/1274620","tags":["report"]},{"url":"https://bugzilla.suse.com/1275555","tags":["report"]},{"url":"https://bugzilla.suse.com/1275665","tags":["report"]},{"url":"https://bugzilla.suse.com/1275669","tags":["report"]},{"url":"https://bugzilla.suse.com/1275797","tags":["report"]},{"url":"https://bugzilla.suse.com/1275925","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74516","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264595-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264640-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250951","tags":["report"]},{"url":"https://bugzilla.suse.com/1261564","tags":["report"]},{"url":"https://bugzilla.suse.com/1261816","tags":["report"]},{"url":"https://bugzilla.suse.com/1267882","tags":["report"]},{"url":"https://bugzilla.suse.com/1272971","tags":["report"]},{"url":"https://bugzilla.suse.com/1273320","tags":["report"]},{"url":"https://bugzilla.suse.com/1274824","tags":["report"]},{"url":"https://bugzilla.suse.com/1274900","tags":["report"]},{"url":"https://bugzilla.suse.com/1275137","tags":["report"]},{"url":"https://bugzilla.suse.com/1275142","tags":["report"]},{"url":"https://bugzilla.suse.com/1275238","tags":["report"]},{"url":"https://bugzilla.suse.com/1275680","tags":["report"]},{"url":"https://bugzilla.suse.com/1275682","tags":["report"]},{"url":"https://bugzilla.suse.com/1275801","tags":["report"]},{"url":"https://bugzilla.suse.com/1275804","tags":["report"]},{"url":"https://bugzilla.suse.com/1275812","tags":["report"]},{"url":"https://bugzilla.suse.com/1275956","tags":["report"]},{"url":"https://bugzilla.suse.com/1276262","tags":["report"]},{"url":"https://bugzilla.suse.com/1276471","tags":["report"]},{"url":"https://bugzilla.suse.com/1276852","tags":["report"]},{"url":"https://bugzilla.suse.com/1276947","tags":["report"]},{"url":"https://bugzilla.suse.com/1277153","tags":["report"]},{"url":"https://bugzilla.suse.com/1277234","tags":["report"]},{"url":"https://bugzilla.suse.com/1277407","tags":["report"]},{"url":"https://bugzilla.suse.com/1277451","tags":["report"]},{"url":"https://bugzilla.suse.com/1277535","tags":["report"]},{"url":"https://bugzilla.suse.com/1277773","tags":["report"]},{"url":"https://bugzilla.suse.com/1277845","tags":["report"]},{"url":"https://bugzilla.suse.com/1278215","tags":["report"]},{"url":"https://bugzilla.suse.com/1278709","tags":["report"]},{"url":"https://bugzilla.suse.com/1279590","tags":["report"]},{"url":"https://bugzilla.suse.com/1280239","tags":["report"]},{"url":"https://bugzilla.suse.com/1280299","tags":["report"]},{"url":"https://bugzilla.suse.com/1280309","tags":["report"]},{"url":"https://bugzilla.suse.com/1280384","tags":["report"]},{"url":"https://bugzilla.suse.com/1280927","tags":["report"]},{"url":"https://bugzilla.suse.com/1280969","tags":["report"]},{"url":"https://bugzilla.suse.com/1281660","tags":["report"]},{"url":"https://bugzilla.suse.com/1281682","tags":["report"]},{"url":"https://bugzilla.suse.com/1281683","tags":["report"]},{"url":"https://bugzilla.suse.com/1281845","tags":["report"]},{"url":"https://bugzilla.suse.com/1282003","tags":["report"]},{"url":"https://bugzilla.suse.com/1282013","tags":["report"]},{"url":"https://bugzilla.suse.com/1282975","tags":["report"]},{"url":"https://bugzilla.suse.com/1283130","tags":["report"]},{"url":"https://bugzilla.suse.com/1283489","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98030","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264706-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-72135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-72135","tags":["report"]},{"url":"https://git.kernel.org/linus/f20d61c22bcaf172d6790b6500e3838e532e71c8","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8876-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8878-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8879-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8877-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8875-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8888-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8889-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8887-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8886-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8888-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8887-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8875-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8887-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8917-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8918-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8963-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-9003-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-3114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-54125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-54271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-22026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-23131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63815","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63818","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63831","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63870","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74656","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74657","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80627","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80706","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-10263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-37807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63869","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-20585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80642","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80657","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80866","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80870","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80874","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-72501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-49234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-49359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-49562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-49651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-49858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-50071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-50303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-50406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-52676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-53231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-53320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-53707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-41062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-54683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-57945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-57982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-57999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-58094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-58095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-58096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-22039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-22057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-22083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-22103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-23160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-37861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-37920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-39925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-31420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80793","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80799","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80831","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89627","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89656","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89706","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89780","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89864","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93811","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93815","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93820","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93825","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100075","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-72135","title":"tpm: Make the TPM character devices non-seekable","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u003ef_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.","status":"published","published":"2026-08-15T05:53:10.315Z","modified":"2026-10-16T18:44:58.643Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:19:52.016971Z"}],"euvd":[{"id":"EUVD-2026-58893","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u003ef_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.","status":"published","published":"2026-08-15T05:53:10Z","modified":"2026-10-16T18:44:58Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:00:03.938875Z"}],"ghsa":[{"id":"GHSA-mgw8-pg67-5pw5","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u003ef_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.","status":"published","published":"2026-08-15T06:32:13Z","modified":"2026-08-17T06:34:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:10:33.443075Z"}],"nvd":[{"id":"CVE-2026-72135","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u003ef_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.","status":"published","published":"2026-08-15T06:21:30.973Z","modified":"2026-10-16T19:17:11.267Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:12:37.926464Z"}],"osv":[{"id":"BELL-CVE-2026-72135","status":"published","published":"2026-08-18T06:06:19.951215Z","modified":"2026-08-18T07:15:27.113055351Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:25.50888Z"},{"id":"CVE-2026-72135","title":"tpm: Make the TPM character devices non-seekable","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u003ef_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.","status":"published","published":"2026-08-15T05:53:10.315Z","modified":"2026-10-28T02:30:54.206093965Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:15.511448Z"},{"id":"DEBIAN-CVE-2026-72135","description":"In the Linux kernel, the following vulnerability has been resolved:  tpm: Make the TPM character devices non-seekable  The TPM character devices expose a sequential command/response interface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE enabled.  After a command leaves a response pending, pread(fd, buf, 16, 0x1400) passes 0x1400 as *off to tpm_common_read(). The transfer length is bounded by response_length, but the offset is used unchecked when forming data_buffer + *off. A sufficiently large offset therefore causes an out-of-bounds heap read through copy_to_user() and, if the copy succeeds, an out-of-bounds zero-write through the following memset().  Positional I/O does not provide coherent semantics for this interface. An arbitrary pread offset cannot represent how much of a response has been consumed sequentially. The write callback always stores a command at the start of data_buffer, while pwrite() does not update file-\u003ef_pos and can leave the sequential read cursor stale.  Call nonseekable_open() from both open handlers. This removes FMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to fail with -ESPIPE before reaching the TPM callbacks, and explicitly marks the files non-seekable. Normal read() and write() continue to use the existing sequential f_pos cursor, leaving the response state machine unchanged.  Tested on Linux 6.12 with KASAN and a swtpm TPM2 device:   - sequential partial reads returned the complete response  - pread() and preadv() with offset 0x1400 returned -ESPIPE  - pwrite() and pwritev() with offset zero returned -ESPIPE  - the pending response remained intact after the rejected operations  - a subsequent normal command/response cycle completed normally  - no KASAN report was produced.","status":"published","published":"2026-08-15T06:21:30.973Z","modified":"2026-10-23T18:05:42.368986304Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:02.094661Z"},{"id":"OESA-2026-3532","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nuaccess: fix integer overflow on access_ok()\n\nThree architectures check the end of a user access against the\naddress limit without taking a possible overflow into account.\nPassing a negative length or another overflow in here returns\nsuccess when it should not.\n\nUse the most common correct implementation here, which optimizes\nfor a constant \u0026apos;size\u0026apos; argument, and turns the common case into a\nsingle comparison.(CVE-2022-49289)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nparisc: Fix double SIGFPE crash\n\nCamm noticed that on parisc a SIGFPE exception will crash an application with\na second SIGFPE in the signal handler.  Dave analyzed it, and it happens\nbecause glibc uses a double-word floating-point store to atomically update\nfunction descriptors. As a result of lazy binding, we hit a floating-point\nstore in fpe_func almost immediately.\n\nWhen the T bit is set, an assist exception trap occurs when when the\nco-processor encounters *any* floating-point instruction except for a double\nstore of register %fr0.  The latter cancels all pending traps.  Let\u0026apos;s fix this\nby clearing the Trap (T) bit in the FP status register before returning to the\nsignal handler in userspace.\n\nThe issue can be reproduced with this test program:\n\nroot@parisc:~# cat fpe.c\n\nstatic void fpe_func(int sig, siginfo_t *i, void *v) {\n        sigset_t set;\n        sigemptyset(\u0026amp;set);\n        sigaddset(\u0026amp;set, SIGFPE);\n        sigprocmask(SIG_UNBLOCK, \u0026amp;set, NULL);\n        printf(\u0026quot;GOT signal %d with si_code %ld\\n\u0026quot;, sig, i-\u0026gt;si_code);\n}\n\nint main() {\n        struct sigaction action = {\n                .sa_sigaction = fpe_func,\n                .sa_flags = SA_RESTART|SA_SIGINFO };\n        sigaction(SIGFPE, \u0026amp;action, 0);\n        feenableexcept(FE_OVERFLOW);\n        return printf(\u0026quot;%lf\\n\u0026quot;,1.7976931348623158E308*1.7976931348623158E308);\n}\n\nroot@parisc:~# gcc fpe.c -lm\nroot@parisc:~# ./a.out\n Floating point exception\n\nroot@parisc:~# strace -f ./a.out\n execve(\u0026quot;./a.out\u0026quot;, [\u0026quot;./a.out\u0026quot;], 0xf9ac7034 /* 20 vars */) = 0\n getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0\n ...\n rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0\n --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0x1078f} ---\n --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} ---\n +++ killed by SIGFPE +++\n Floating point exception(CVE-2025-37991)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()\n\nkcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws\nremains NULL while ectx.ws_size is set, leading to a potential NULL\npointer dereference in atom_get_src_int() when accessing WS entries.\n\nReturn -ENOMEM on allocation failure to avoid the NULL dereference.(CVE-2025-68190)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64/fpsimd: signal: Fix restoration of SVE context\n\nWhen SME is supported, Restoring SVE signal context can go wrong in a\nfew ways, including placing the task into an invalid state where the\nkernel may read from out-of-bounds memory (and may potentially take a\nfatal fault) and/or may kill the task with a SIGKILL.\n\n(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into\n    an invalid state where SVCR.SM is set (and sve_state is non-NULL)\n    but TIF_SME is clear, consequently resuting in out-of-bounds memory\n    reads and/or killing the task with SIGKILL.\n\n    This can only occur in unusual (but legitimate) cases where the SVE\n    signal context has either been modified by userspace or was saved in\n    the context of another task (e.g. as with CRIU), as otherwise the\n    presence of an SVE signal context with SVE_SIG_FLAG_SM implies that\n    TIF_SME is already set.\n\n    While in this state, task_fpsimd_load() will NOT configure SMCR_ELx\n    (leaving some arbitrary value configured in hardware) before\n    restoring SVCR and attempting to restore the streaming mode SVE\n    registers from memory via sve_load_state(). As the value of\n    SMCR_ELx.LEN may be larger than the task\u0026apos;s streaming SVE vector\n    length, this may read memory outside of the task\u0026apos;s allocated\n    sve_state, reading unrelated data and/or triggering a fault.\n\n    While this can result in secrets being loaded into streaming SVE\n    registers, these values are never exposed. As TIF_SME is clear,\n    fpsimd_bind_task_to_cpu() will configure CPACR_ELx.SMEN to trap EL0\n    accesses to streaming mode SVE registers, so these cannot be\n    accessed directly at EL0. As fpsimd_save_user_state() verifies the\n    live vector length before saving (S)SVE state to memory, no secret\n    values can be saved back to memory (and hence cannot be observed via\n    ptrace, signals, etc).\n\n    When the live vector length doesn\u0026apos;t match the expected vector length\n    for the task, fpsimd_save_user_state() will send a fatal SIGKILL\n    signal to the task. Hence the task may be killed after executing\n    userspace for some period of time.\n\n(2) Restoring a context with SVE_SIG_FLAG_SM clear does not clear the\n    task\u0026apos;s SVCR.SM. If SVCR.SM was set prior to restoring the context,\n    then the task will be left in streaming mode unexpectedly, and some\n    register state will be combined inconsistently, though the task will\n    be left in legitimate state from the kernel\u0026apos;s PoV.\n\n    This can only occur in unusual (but legitimate) cases where ptrace\n    has been used to set SVCR.SM after entry to the sigreturn syscall,\n    as syscall entry clears SVCR.SM.\n\n    In these cases, the the provided SVE register data will be loaded\n    into the task\u0026apos;s sve_state using the non-streaming SVE vector length\n    and the FPSIMD registers will be merged into this using the\n    streaming SVE vector length.\n\nFix (1) by setting TIF_SME when setting SVCR.SM. This also requires\nensuring that the task\u0026apos;s sme_state has been allocated, but as this could\ncontain live ZA state, it should not be zeroed. Fix (2) by clearing\nSVCR.SM when restoring a SVE signal context with SVE_SIG_FLAG_SM clear.\n\nFor consistency, I\u0026apos;ve pulled the manipulation of SVCR, TIF_SVE, TIF_SME,\nand fp_type earlier, immediately after the allocation of\nsve_state/sme_state, before the restore of the actual register state.\nThis makes it easier to ensure that these are always modified\nconsistently, even if a fault is taken while reading the register data\nfrom the signal context. I do not expect any software to depend on the\nexact state restored when a fault is taken while reading the context.(CVE-2026-23102)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ncsi: fix skb leak in error paths\n\nEarly return paths in NCSI RX and AEN handlers fail to release\nthe received skb, resulting in a memory leak.\n\nSpecifically, ncsi_aen_handler() returns on invalid AEN packets\nwithout consuming the skb. Similarly, ncsi_rcv_rsp() exits early\nwhen failing to resolve the NCSI device, response handler, or\nrequest, leaving the skb unfreed.(CVE-2026-43373)\n\nIn the Linux kernel, the following vulnerability has been resolved:  selinux: fix overlayfs mmap() and mprotect() access checks  The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the \u0026quot;user\u0026quot; file) and the mounter\u0026apos;s credentials are sufficient to access the lower level file (the \u0026quot;backing\u0026quot; file).  Unfortunately, the current code does not properly enforce these access controls for both mmap() and mprotect() operations on overlayfs filesystems.  This patch makes use of the newly created security_mmap_backing_file() LSM hook to provide the missing backing file enforcement for mmap() operations, and leverages the backing file API and new LSM blob to provide the necessary information to properly enforce the mprotect() access controls.  The Linux kernel CVE team has assigned CVE-2026-46054 to this issue.(CVE-2026-46054)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfbcon: Avoid OOB font access if console rotation fails\n\nClear the font buffer if the reallocation during console rotation fails\nin fbcon_rotate_font(). The putcs implementations for the rotated buffer\nwill return early in this case. See [1] for an example.\n\nCurrently, fbcon_rotate_font() keeps the old buffer, which is too small\nfor the rotated font. Printing to the rotated console with a high-enough\ncharacter code will overflow the font buffer.\n\nv2:\n- fix typos in commit message(CVE-2026-46191)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvsock: fix buffer size clamping order\n\nIn vsock_update_buffer_size(), the buffer size was being clamped to the\nmaximum first, and then to the minimum. If a user sets a minimum buffer\nsize larger than the maximum, the minimum check overrides the maximum\ncheck, inverting the constraint.\n\nThis breaks the intended socket memory boundaries by allowing the\nvsk-\u0026gt;buffer_size to grow beyond the configured vsk-\u0026gt;buffer_max_size.\n\nFix this by checking the minimum first, and then the maximum. This\nensures the buffer size never exceeds the buffer_max_size.(CVE-2026-46234)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_uart: fix UAFs and race conditions in close and init paths\n\nVulnerabilities leading to Use-After-Free (UAF) and Null Pointer\nDereference (NPD) conditions were observed in the lifecycle management\nof hci_uart.\n\nThe primary issue arises because the workqueues (init_ready and\nwrite_work) are only flushed/cancelled if the HCI_UART_PROTO_READY\nflag is set during TTY close. If a hangup occurs before setup completes,\nhci_uart_tty_close() skips the teardown of these workqueues and\nproceeds to free the `hu` struct. When the scheduled work executes\nlater, it blindly dereferences the freed `hu` struct.\n\nFurthermore, several data races and UAFs were identified in the teardown\nsequence:\n1. Calling hci_uart_flush() from hci_uart_close() without effectively\n   disabling write_work causes a race condition where both can concurrently\n   double-free hu-\u0026gt;tx_skb. This happens because protocol timers can\n   concurrently invoke hci_uart_tx_wakeup() and requeue write_work.\n2. Calling hci_free_dev(hdev) before hu-\u0026gt;proto-\u0026gt;close(hu) causes a UAF\n   when vendor specific protocol close callbacks dereference hu-\u0026gt;hdev.\n3. In the initialization error paths, failing to take the proto_lock\n   write lock before clearing PROTO_READY leads to races with active\n   readers. Additionally, hci_uart_tty_receive() accesses hu-\u0026gt;hdev\n   outside the read lock, leading to UAFs if the initialization error\n   path frees hdev concurrently.\n\nFix these synchronization and lifecycle issues by:\n1. Re-ordering hci_uart_tty_close() to clear HCI_UART_PROTO_READY first,\n   followed immediately by a cancel_work_sync(\u0026amp;hu-\u0026gt;write_work). Clearing\n   the flag locks out concurrent protocol timers from successfully invoking\n   hci_uart_tx_wakeup(), effectively rendering the cancellation permanent\n   and preventing the tx_skb double-free.\n2. Note: Clearing PROTO_READY early causes hci_uart_close() to skip\n   hu-\u0026gt;proto-\u0026gt;flush(). This is perfectly safe in the tty_close path\n   because hu-\u0026gt;proto-\u0026gt;close() executes shortly after, which intrinsically\n   purges all protocol SKB queues and tears down the state.\n3. Relocating hu-\u0026gt;proto-\u0026gt;close(hu) strictly prior to hci_free_dev(hdev)\n   across all close and error paths to prevent vendor-level UAFs.\n4. Moving the hdev-\u0026gt;stat.byte_rx increment in hci_uart_tty_receive()\n   inside the proto_lock read-side critical section to safely synchronize\n   with device unregistration.\n5. Adding cancel_work_sync(\u0026amp;hu-\u0026gt;write_work) to hci_uart_close() to safely\n   flush the workqueue before hci_uart_flush() is invoked via the HCI core.\n6. Utilizing cancel_work_sync() instead of disable_work_sync() across\n   all paths to prevent permanently breaking user-space retry capabilities.(CVE-2026-46275)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: terminate the cached volume label after UTF-8 conversion\n\nntfs_fill_super() loads the on-disk volume label with utf16s_to_utf8s()\nand stores the result in sbi-\u0026gt;volume.label. The converted label is later\nexposed through ntfs3_label_show() using %s, but utf16s_to_utf8s() only\nreturns the number of bytes written and does not add a trailing NUL.\n\nIf the converted label fills the entire fixed buffer,\nntfs3_label_show() can read past the end of sbi-\u0026gt;volume.label while\nlooking for a terminator.\n\nTerminate the cached label explicitly after a successful conversion and\nclamp the exact-full case to the last byte of the buffer.(CVE-2026-53023)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocfs2/dlm: validate qr_numregions in dlm_match_regions()\n\nPatch series \u0026quot;ocfs2/dlm: fix two bugs in dlm_match_regions()\u0026quot;.\n\nIn dlm_match_regions(), the qr_numregions field from a DLM_QUERY_REGION\nnetwork message is used to drive loops over the qr_regions buffer without\nsufficient validation.  This series fixes two issues:\n\n- Patch 1 adds a bounds check to reject messages where qr_numregions\n  exceeds O2NM_MAX_REGIONS. The o2net layer only validates message\n  byte length; it does not constrain field values, so a crafted message\n  can set qr_numregions up to 255 and trigger out-of-bounds reads past\n  the 1024-byte qr_regions buffer.\n\n- Patch 2 fixes an off-by-one in the local-vs-remote comparison loop,\n  which uses \u0026apos;\u0026lt;=\u0026apos; instead of \u0026apos;\u0026lt;\u0026apos;, reading one entry past the valid range\n  even when qr_numregions is within bounds.\n\n\nThis patch (of 2):\n\nThe qr_numregions field from a DLM_QUERY_REGION network message is used\ndirectly as loop bounds in dlm_match_regions() without checking against\nO2NM_MAX_REGIONS.  Since qr_regions is sized for at most O2NM_MAX_REGIONS\n(32) entries, a crafted message with qr_numregions \u0026gt; 32 causes\nout-of-bounds reads past the qr_regions buffer.\n\nAdd a bounds check for qr_numregions before entering the loops.(CVE-2026-53043)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet\n\nThe irq_prepare_bcn_tasklet is initialized in rtl_pci_init() and\nscheduled when RTL_IMR_BCNINT interrupt is triggered by hardware.\nBut it is never killed in rtl_pci_deinit(). When the rtlwifi card\nprobe fails or is being detached, the ieee80211_hw is deallocated.\nHowever, irq_prepare_bcn_tasklet may still be running or pending,\nleading to use-after-free when the freed ieee80211_hw is accessed\nin _rtl_pci_prepare_bcn_tasklet().\n\nSimilar to irq_tasklet, add tasklet_kill() in rtl_pci_deinit() to\nensure that irq_prepare_bcn_tasklet is properly terminated before\nthe ieee80211_hw is released.\n\nThe issue was identified through static analysis.(CVE-2026-53112)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nPCI: use generic driver_override infrastructure\n\nWhen a driver is probed through __driver_attach(), the bus\u0026apos; match()\ncallback is called without the device lock held, thus accessing the\ndriver_override field without a lock, which can cause a UAF.\n\nFix this by using the driver-core driver_override infrastructure taking\ncare of proper locking internally.\n\nNote that calling match() from __driver_attach() without the device lock\nheld is intentional. [1](CVE-2026-53120)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nA tunnel changelink() operates on at most two netns, dev_net(dev) and\nthe tunnel link netns t-\u0026gt;net. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u0026gt;net can rewrite a tunnel that\nlives in t-\u0026gt;net.\n\nAdd rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in\nnet/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is\nskipped when the link netns is dev_net(dev), where the rtnl path already\nchecked it. The other patches in this series use the same helper.\n\nGate ipgre_changelink() and erspan_changelink() with it, at the top of\nthe op before any attribute is parsed, because the parsers update live\ntunnel fields first. ipgre_netlink_parms() sets t-\u0026gt;collect_md before\nip_tunnel_changelink() runs.\n\nCommit 8b484efd5cb4 (\u0026quot;ip6: vti: Use ip6_tnl.net in\nvti6_siocdevprivate().\u0026quot;) added the same check on the ioctl path. This\nadds it on RTM_NEWLINK.(CVE-2026-63829)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: validate extension header length before copying to cmsg\n\nip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR}\ncmsgs (and their IPV6_2292* legacy counterparts) by trusting the\non-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length.\nThe length was validated only at parse time (ipv6_parse_hopopts(),\netc.).  An nftables payload-write expression can rewrite hdrlen after\nparsing and before the skb reaches recvmsg; the write itself is\nin-bounds but put_cmsg() then reads up to ((hdrlen+1) \u0026lt;\u0026lt; 3) = 2040\nbytes from an 8-byte header.  nftables is reachable from an\nunprivileged user namespace, so this is an unprivileged\nslab-out-of-bounds read:\n\n  BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540\n   put_cmsg+0x3ac/0x540\n   udpv6_recvmsg+0xca0/0x1250\n   sock_recvmsg+0xdf/0x190\n   ____sys_recvmsg+0x1b1/0x620\n\nAdd ipv6_get_exthdr_len() which validates that at least two bytes\nare accessible before reading the hdrlen field, then checks the\ncomputed length against skb_tail_pointer(skb), returning 0 on\nfailure.  Extension headers are kept in the linear skb area by\npskb_may_pull() during input, so skb_tail_pointer() is the correct\nbound.\n\nUse ipv6_get_exthdr_len() at all non-AH call sites: the five\nstandalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR)\nand the three standard cases in the extension-header walk loop\n(DSTOPTS, ROUTING, default).  AH retains an inline bounds check\nbecause its length formula differs ((ptr[1]+2)\u0026lt;\u0026lt;2).\n\nThe walk loop also gets a pre-read bounds check at the top to\nvalidate ptr before any case accesses ptr[0] or ptr[1].\n\nWhen the walk loop detects a corrupted header, return from the\nfunction instead of continuing to process later socket options.(CVE-2026-63920)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().\n\nAfter patch 1/2 in this series, vti6_update() unlinks and relinks\nthe tunnel through t-\u0026gt;net. vti6_siocdevprivate() still uses\ndev_net(dev) for the collision lookup. For a tunnel moved through\nIFLA_NET_NS_FD, dev_net(dev) is the new netns, not t-\u0026gt;net.\n\nSIOCCHGTUNNEL on a migrated tunnel then runs:\n\n  net = dev_net(dev)                    /* migrated netns */\n  t   = vti6_locate(net, \u0026amp;p1, false)    /* misses target in t-\u0026gt;net */\n  ...\n  t   = netdev_priv(dev)\n  vti6_update(t, \u0026amp;p1, false)            /* mutates t-\u0026gt;net\u0026apos;s hash */\n\nA caller in the migrated netns picks params that match a tunnel\nin the creation netns. The lookup in dev_net(dev) finds nothing.\nvti6_update() prepends the migrated tunnel at the head of the\ncreation netns hash bucket for those params. Later lookups in\nthe creation netns resolve to the migrated device. xfrm receive\ndelivers the matched packets through a device the caller controls.\n\nReachable from an unprivileged user namespace (unshare --user\n--map-root-user --net). Cross tenant scope on container hosts.\n\nSwitch the SIOCCHGTUNNEL path on a non fallback device to use\nt-\u0026gt;net for the lookup. The lookup now matches the netns\nvti6_update() operates on.\n\nAlso add ns_capable(self-\u0026gt;net-\u0026gt;user_ns, CAP_NET_ADMIN) before\nthe lookup. The check at the top of the case is against\ndev_net(dev)-\u0026gt;user_ns, which after migration is the attacker\u0026apos;s\nnetns. A caller there can pick params absent from self-\u0026gt;net,\nthe lookup returns NULL, t becomes self, and vti6_update()\ninserts the device into the creation netns hash. The new check\nrequires CAP_NET_ADMIN in the creation netns user_ns too.\n\nSIOCADDTUNNEL and SIOCCHGTUNNEL on the fallback device keep\ndev_net(dev), which equals init_net there.(CVE-2026-63921)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: synproxy: refresh tcphdr after skb_ensure_writable\n\nsynproxy_tstamp_adjust() rewrites the TCP timestamp option in place\nand then patches the TCP checksum via inet_proto_csum_replace4() on\nthe caller-supplied tcphdr pointer.  Both ipv4_synproxy_hook() and\nipv6_synproxy_hook() obtain that pointer with skb_header_pointer()\nbefore calling in, so it may either alias skb-\u0026gt;head directly or\npoint at the caller\u0026apos;s on-stack _tcph buffer.\n\nBetween obtaining the pointer and using it, the function calls\nskb_ensure_writable(skb, optend), which on a cloned or non-linear\nskb invokes pskb_expand_head() and frees the old skb-\u0026gt;head.  After\nthat point the cached th is stale:\n\n    caller (ipv[46]_synproxy_hook)\n      th = skb_header_pointer(skb, ..., \u0026amp;_tcph)\n      synproxy_tstamp_adjust(skb, protoff, th, ...)\n        skb_ensure_writable(skb, optend)\n          pskb_expand_head()        /* kfree(old skb-\u0026gt;head) */\n        ...\n        inet_proto_csum_replace4(\u0026amp;th-\u0026gt;check, ...)\n                                    /* writes into freed head, or\n                                       into the caller\u0026apos;s stack copy\n                                       leaving the on-wire checksum\n                                       stale */\n\nThe option bytes are written through skb-\u0026gt;data and are fine; only\nthe checksum update goes through th and so lands in the wrong\nplace.  The result is either a write into freed slab memory or a\npacket leaving with a checksum that does not match its payload.\n\nFix by re-deriving th from skb-\u0026gt;data + protoff immediately after\nskb_ensure_writable() succeeds, so the subsequent checksum update\ntargets the linear, writable header.(CVE-2026-64007)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv4: raw: reject IP_HDRINCL packets with ihl \u0026lt; 5\n\nraw_send_hdrinc() validates that the caller-supplied IPv4 header\nfits within the message length:\n\n    iphlen = iph-\u0026gt;ihl * 4;\n    err = -EINVAL;\n    if (iphlen \u0026gt; length)\n        goto error_free;\n\n    if (iphlen \u0026gt;= sizeof(*iph)) {\n        /* fix up saddr, tot_len, id, csum, transport_header */\n    }\n\nIt does not, however, reject ihl \u0026lt; 5.  For such a packet the\n\u0026quot;if (iphlen \u0026gt;= sizeof(*iph))\u0026quot; branch is skipped, leaving the\ncrafted iphdr untouched, but the packet is still handed to\n__ip_local_out() and onward.  Downstream consumers that read\niph-\u0026gt;ihl assume a sane value: net/ipv4/ah4.c:ah_output() in\nparticular subtracts sizeof(struct iphdr) from top_iph-\u0026gt;ihl * 4\nand passes the (signed-int-negative, then cast to size_t)\nresult to memcpy(), producing an OOB access of length close to\nSIZE_MAX and a host kernel panic.\n\nAn IPv4 header with ihl \u0026lt; 5 is malformed by definition (RFC 791:\n\u0026quot;Internet Header Length is the length of the internet header in\n32 bit words ... Note that the minimum value for a correct header\nis 5.\u0026quot;).  The kernel should not be willing to inject such a\npacket into its own output path.\n\nReject \u0026quot;iphlen \u0026lt; sizeof(*iph)\u0026quot; alongside the existing\n\u0026quot;iphlen \u0026gt; length\u0026quot; check.  This matches the principle that locally\nconstructed packets that re-enter the IP stack must pass the same\nbasic sanity tests that a foreign packet would be subjected to.\n\nOnce this lands, the \u0026quot;if (iphlen \u0026gt;= sizeof(*iph))\u0026quot; wrapper around\nthe fixup branch becomes redundant; left in place to keep the\npatch minimal and backport-friendly.  A follow-up can unwrap it.\n\nNote that commit 86f4c90a1c5c (\u0026quot;ipv4, ipv6: ensure raw socket\nmessage is big enough to hold an IP header\u0026quot;) ensures the message\nbuffer is large enough to hold an iphdr, but does not constrain\nthe self-reported iph-\u0026gt;ihl.\n\nReachability: the malformed packet source is any caller with\nCAP_NET_RAW, including an unprivileged process in a user+net\nnamespace on a kernel with CONFIG_USER_NS=y.  The reproduced AH\ncrash also requires a matching xfrm AH policy on the outgoing\nroute; a container granted CAP_NET_ADMIN can install that state\nand policy in its netns.  Loopback bypasses xfrm_output, so the\ntrigger uses a real netdev.\n\nReproduced on UML + KASAN: kernel-mode fault at addr 0x0 with\nmemcpy_orig at the crash site.  Same shape reproduces inside a\nrootless Docker container with --cap-add NET_ADMIN on a stock\ndistro kernel.(CVE-2026-64114)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: asihpi: Fix potential OOB array access at reading cache\n\nfind_control() to retrieve a cached info accesses the array with the\ngiven index blindly, which may lead to an OOB array access.\nAdd a sanity check for avoiding it.(CVE-2026-64133)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfuse: re-lock request before returning from fuse_ref_folio()\n\nfuse_ref_folio() unlocks the request but does not re-lock it before\nreturning. fuse_chan_abort() can end the request and the async end\ncallback (eg fuse_writepage_free()) can free the args while the\nsubsequent copy chain logic after fuse_ref_folio() accesses them,\nleading to use-after-free issues.\n\nFix this by locking the request in fuse_ref_folio() before returning.(CVE-2026-64266)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes\n\nReject invalid `net.ipv4.tcp_reordering` values before they reach TCP\nsocket state. The sysctl is stored as an `int` but copied into the\n`u32` `tp-\u0026gt;reordering` field for new sockets, so negative writes wrap\nto large values.\n\nWith `tcp_mtu_probing=2`, the wrapped value can overflow the\n`tcp_mtu_probe()` size calculation and drive the MTU probing path into\nan out-of-bounds read. Route `tcp_reordering` writes through\n`proc_dointvec_minmax()` and require it to be at least 1. Also require\n`tcp_max_reordering` to be at least 1 so the configured maximum cannot\nbecome negative either.\n\nWhen registering the table for a non-init network namespace, relocate\n`extra2` pointers that refer into `init_net.ipv4` so the\n`tcp_reordering` upper bound follows that namespace\u0026apos;s\n`tcp_max_reordering`.\n\nHarden `tcp_mtu_probe()` itself by computing `size_needed` as `u64`.\nThis keeps the send queue and window checks from being bypassed through\nsigned integer overflow.(CVE-2026-64422)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: af_key: initialize alg_key_len for IPComp states\n\npfkey_msg2xfrm_state() handles the IPComp (SADB_X_SATYPE_IPCOMP) case by\nallocating x-\u0026gt;calg and copying only the algorithm name:\n\n\tx-\u0026gt;calg = kmalloc_obj(*x-\u0026gt;calg);\n\tif (!x-\u0026gt;calg) {\n\t\terr = -ENOMEM;\n\t\tgoto out;\n\t}\n\tstrcpy(x-\u0026gt;calg-\u0026gt;alg_name, a-\u0026gt;name);\n\tx-\u0026gt;props.calgo = sa-\u0026gt;sadb_sa_encrypt;\n\nUnlike the authentication (x-\u0026gt;aalg) and encryption (x-\u0026gt;ealg) branches of\nthe same function, the compression branch never initializes\ncalg-\u0026gt;alg_key_len.  IPComp carries no key and the allocation only\nreserves sizeof(struct xfrm_algo) (i.e. no room for a key), so the field\nis left containing uninitialized slab data.\n\ncalg-\u0026gt;alg_key_len is later used as a length by xfrm_algo_clone() when an\nIPComp state is cloned during XFRM_MSG_MIGRATE:\n\n\txfrm_state_migrate()\n\t  xfrm_state_clone_and_setup()\n\t    x-\u0026gt;calg = xfrm_algo_clone(orig-\u0026gt;calg);\n\t      kmemdup(orig, xfrm_alg_len(orig));\n\nwhere xfrm_alg_len() returns sizeof(*alg) + (alg_key_len + 7) / 8.  With\na non-zero garbage alg_key_len, kmemdup() reads past the end of the\n68-byte calg object.  Adding an IPComp SA via PF_KEY and then migrating\nit triggers (net-next, KASAN, init_on_alloc=0):\n\n  BUG: KASAN: slab-out-of-bounds in kmemdup_noprof+0x44/0x60\n  Read of size 4164 at addr ff11000025a74980 by task diag2/9287\n  CPU: 3 UID: 0 PID: 9287 Comm: diag2 7.1.0-rc6-g903db046d557 #1\n  Call Trace:\n   \u0026lt;TASK\u0026gt;\n   dump_stack_lvl+0x10e/0x1f0\n   print_report+0xf7/0x600\n   kasan_report+0xe4/0x120\n   kasan_check_range+0x105/0x1b0\n   __asan_memcpy+0x23/0x60\n   kmemdup_noprof+0x44/0x60\n   xfrm_state_migrate+0x70a/0x1da0\n   xfrm_migrate+0x753/0x18a0\n   xfrm_do_migrate+0xb47/0xf10\n   xfrm_user_rcv_msg+0x411/0xb50\n   netlink_rcv_skb+0x158/0x420\n   xfrm_netlink_rcv+0x71/0x90\n   netlink_unicast+0x584/0x850\n   netlink_sendmsg+0x8b0/0xdc0\n   ____sys_sendmsg+0x9f7/0xb90\n   ___sys_sendmsg+0x134/0x1d0\n   __sys_sendmsg+0x16d/0x220\n   do_syscall_64+0x116/0x7d0\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n   \u0026lt;/TASK\u0026gt;\n\n  Allocated by task 9287:\n   kasan_save_stack+0x33/0x60\n   kasan_save_track+0x14/0x30\n   __kasan_kmalloc+0xaa/0xb0\n   pfkey_add+0x2652/0x2ea0\n   pfkey_process+0x6d0/0x830\n   pfkey_sendmsg+0x42c/0x850\n   __sys_sendto+0x461/0x4b0\n   __x64_sys_sendto+0xe0/0x1c0\n   do_syscall_64+0x116/0x7d0\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n  The buggy address belongs to the object at ff11000025a74980\n   which belongs to the cache kmalloc-96 of size 96\n  The buggy address is located 0 bytes inside of\n   allocated 68-byte region [ff11000025a74980, ff11000025a749c4)\n\nDepending on the uninitialized value the same field can instead request\nan oversized kmemdup() allocation and make the migration clone fail.\n\nThe XFRM netlink path is not affected: verify_one_alg() rejects an\nXFRMA_ALG_COMP attribute shorter than xfrm_alg_len(), so a calg added via\nXFRM_MSG_NEWSA is always self-consistent.\n\nInitialize calg-\u0026gt;alg_key_len to 0, matching the aalg/ealg branches.(CVE-2026-64436)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/edid: fix OOB read in drm_parse_tiled_block()\n\ndrm_parse_tiled_block() casts the DisplayID block to a\nstruct displayid_tiled_block and reads the full fixed layout up to\ntile-\u0026gt;topology_id[7] without checking block-\u0026gt;num_bytes. The DisplayID\niterator only validates the declared payload length, so a crafted EDID\ncan advertise a tiled-display block (tag DATA_BLOCK_TILED_DISPLAY, or\nDATA_BLOCK_2_TILED_DISPLAY_TOPOLOGY for v2.0) with a small num_bytes at\nthe end of a DisplayID extension. The read then runs past the end of the\nexact-sized kmemdup()\u0026apos;d EDID allocation, a heap out-of-bounds read.\n\nReject blocks shorter than the spec\u0026apos;s 22-byte tiled payload before\nreading the fixed struct, as drm_parse_vesa_mso_data() already does.\n\n  BUG: KASAN: slab-out-of-bounds in drm_edid_connector_update\n  Read of size 2 at addr ffff888010077700 by task exploit/147\n   dump_stack_lvl (lib/dump_stack.c:94 ...)\n   print_report (mm/kasan/report.c:378 ...)\n   kasan_report (mm/kasan/report.c:595)\n   drm_edid_connector_update (drivers/gpu/drm/drm_edid.c:7581)\n   bochs_connector_helper_get_modes (drivers/gpu/drm/tiny/bochs.c:574)\n   drm_helper_probe_single_connector_modes (drivers/gpu/drm/drm_probe_helper.c:426)\n   status_store (drivers/gpu/drm/drm_sysfs.c:219)\n   ...\n   vfs_write (fs/read_write.c:595 fs/read_write.c:688)\n   ksys_write (fs/read_write.c:740)(CVE-2026-64546)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: qca: fix NVM tag length underflow in TLV parser\n\nIn the TLV_TYPE_NVM branch of qca_tlv_check_data() the tag loop bound is\n\u0026quot;while (idx \u0026lt; length - sizeof(struct tlv_type_nvm))\u0026quot;. \u0026quot;length\u0026quot; is a signed\nint from the firmware TLV header and sizeof(struct tlv_type_nvm) is a\nsize_t (12), so \u0026quot;length\u0026quot; is converted to size_t and any firmware-supplied\n\u0026quot;length\u0026quot; \u0026lt; 12 makes the subtraction wrap to a huge value. The loop body\nthen reads a 12-byte struct tlv_type_nvm past the end of the short\nvmalloc\u0026apos;d firmware buffer (and the EDL_TAG_ID_* handlers can write past it).\n\nRewrite the bound as \u0026quot;idx + sizeof(struct tlv_type_nvm) \u0026lt;= length\u0026quot;; both\noperands are non-negative, so it no longer underflows and a \u0026quot;length\u0026quot; too\nsmall for one record correctly skips the loop.\n\n  BUG: KASAN: vmalloc-out-of-bounds in qca_download_firmware.isra.0 (drivers/bluetooth/btqca.c:421)\n  Read of size 2 at addr ffffc900000e5004 by task kworker/u9:0/52\n  Workqueue: hci0 hci_power_on\n  Call Trace:\n   ...\n   kasan_report (mm/kasan/report.c:595)\n   qca_download_firmware.isra.0 (drivers/bluetooth/btqca.c:421 drivers/bluetooth/btqca.c:617)\n   qca_uart_setup (drivers/bluetooth/btqca.c:948)\n   qca_setup (drivers/bluetooth/hci_qca.c:2029)\n   hci_uart_setup (drivers/bluetooth/hci_ldisc.c:438)\n   hci_dev_open_sync (net/bluetooth/hci_sync.c:5227)\n   hci_power_on (net/bluetooth/hci_core.c:920)\n   process_one_work (kernel/workqueue.c:3322)\n   worker_thread (kernel/workqueue.c:3486)\n   kthread (kernel/kthread.c:436)\n   ret_from_fork (arch/x86/kernel/process.c:158)\n   ret_from_fork_asm (arch/x86/entry/entry_64.S:245)(CVE-2026-64573)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()\n\nceph_handle_caps() reads snap_trace_len from the wire-format\nceph_mds_caps header and uses it unconditionally to build a fake\nend pointer (snaptrace + snaptrace_len) that is later handed to\nceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:\n\n    snaptrace     = h + 1;\n    snaptrace_len = le32_to_cpu(h-\u0026gt;snap_trace_len);\n    p             = snaptrace + snaptrace_len;\n    ...\n    case CEPH_CAP_OP_IMPORT:\n        if (snaptrace_len) {\n            ...\n            if (ceph_update_snap_trace(mdsc, snaptrace,\n                                       snaptrace + snaptrace_len,\n                                       false, \u0026amp;realm)) { ... }\n\nceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm\nfrom snaptrace using ceph_decode_need(\u0026amp;p, e, sizeof(*ri), bad)\nwith the attacker-supplied fake end e == snaptrace + snaptrace_len.\nWith snaptrace_len == 0xFFFFFFFF the bound check is trivially\nsatisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past\nthe legitimate msg-\u0026gt;front buffer, and ri-\u0026gt;num_snaps /\nri-\u0026gt;num_prior_parent_snaps then drive further out-of-bounds\nreads of the encoded snap arrays.\n\nThe eleven msg_version \u0026gt;= 2 .. msg_version \u0026gt;= 12 decoder blocks\nabove the op switch each catch this OOB through their\nceph_decode_*_safe() / ceph_decode_need() helpers, but they sit\nbehind a hdr.version-gated if, so a malicious or compromised\nMDS that sets msg-\u0026gt;hdr.version = 1 reaches the IMPORT path with\nno version-gated decoder having validated snap_trace_len. The\nshape has been present since ceph_handle_caps() was introduced.\n\nValidate snap_trace_len against the message front buffer before\nconsuming it, using the canonical ceph_decode_need() / ceph_has_room()\nhelper.  The helper bounds the length with subtraction (n \u0026lt;= end - p,\nguarded by end \u0026gt;= p) rather than pointer addition, so it is wrap-safe\nfor the attacker-controlled u32 length on 32-bit builds where\np + snap_trace_len could overflow the address space.  This matches the\nrest of the ceph decode path (e.g. the pool_ns_len check a few lines\nbelow), and the existing goto bad cleanup already covers this exit\npath.(CVE-2026-68160)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u0026gt;f_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.(CVE-2026-72135)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_u32: reject invalid shift counts\n\nu32_match_it() executes rule-supplied shift operands on a 32-bit\nvalue. A malformed u32 rule can provide a shift count of 32 or more,\ntriggering an undefined shift out-of-bounds during packet evaluation.\n\nValidate XT_U32_LEFTSH and XT_U32_RIGHTSH operands in\nu32_mt_checkentry() and reject malformed rules before they reach the\npacket path.(CVE-2026-72350)","status":"published","published":"2026-08-30T04:15:17Z","modified":"2026-08-30T04:32:09.80793941Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3703","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: Fix sc7280 lpass potential buffer overflow\n\nCase values introduced in commit\n5f78e1fb7a3e (\u0026quot;ASoC: qcom: Add driver support for audioreach solution\u0026quot;)\ncause out of bounds access in arrays of sc7280 driver data (e.g. in case\nof RX_CODEC_DMA_RX_0 in sc7280_snd_hw_params()).\n\nRedefine LPASS_MAX_PORTS to consider the maximum possible port id for\nq6dsp as sc7280 driver utilizes some of those values.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2025-37979)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: asix_devices: Fix PHY address mask in MDIO bus initialization\n\nSyzbot reported shift-out-of-bounds exception on MDIO bus initialization.\n\nThe PHY address should be masked to 5 bits (0-31). Without this\nmask, invalid PHY addresses could be used, potentially causing issues\nwith MDIO bus operations.\n\nFix this by masking the PHY address with 0x1f (31 decimal) to ensure\nit stays within the valid range.(CVE-2025-38736)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl\n\nWhen page reassignment was added to af_alg_pull_tsgl the original\nloop wasn\u0026apos;t updated so it may try to reassign one more page than\nnecessary.\n\nAdd the check to the reassignment so that this does not happen.\n\nAlso update the comment which still refers to the obsolete offset\nargument.(CVE-2026-43078)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - snapshot IV for async AEAD requests\n\nAF_ALG AEAD AIO requests currently use the socket-wide IV buffer during\nrequest processing.  For async requests, later socket activity can\nupdate that shared state before the original request has fully\ncompleted, which can lead to inconsistent IV handling.\n\nSnapshot the IV into per-request storage when preparing the AEAD\nrequest, so in-flight operations no longer depend on mutable socket\nstate.(CVE-2026-46028)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: esp: restore combined single-frag length gate\n\nThe ESP out-of-place fast path appends the trailer in esp_output_head()\nbefore esp_output_tail() allocates the destination page frag. The\nhead-side gate currently checks skb-\u0026gt;data_len and tailen separately, but\nthe tail code allocates a single destination frag from the combined\npost-trailer skb-\u0026gt;data_len.\n\nReject the page-frag fast path when the combined aligned length exceeds a\npage. Otherwise skb_page_frag_refill() may fall back to a single page while\nthe destination sg still spans the combined skb-\u0026gt;data_len.\n\nRestore this combined-length page gate for both IPv4 and IPv6.(CVE-2026-63912)\n\nIn the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation. __ip_vs_get_out_rt() calls skb_ensure_writable() which may reallocate skb-\u0026gt;head, causing the previously obtained IP header pointer to become a dangling pointer, leading to a use-after-free vulnerability.(CVE-2026-68476)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipvs: fix more places with wrong ipv6 transport offsets\n\nSashiko reports for more incorrect IPv6 transport offsets.\n\nThe app code for TCP was assuming IPv4 network header\neven after the ipvsh argument was provided. This can\ncause problems with apps over IPv6. As for the only\nofficial app in the kernel tree (FTP) this problem is\nharmless because we use Netfilter to mangle the FTP\nports and we do not adjust the TCP seq numbers.\n\nAlso, provide correct offset of the ICMPV6 header in\nip_vs_out_icmp_v6() for correct checksum checks when\nthe IPv6 packet has extension headers.(CVE-2026-68477)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipvs: use parsed transport offset in SCTP state lookup\n\nset_sctp_state() reads the SCTP chunk header again in order to drive the\nIPVS SCTP state table. For IPv6 it computes the offset with\nsizeof(struct ipv6hdr), while the surrounding IPVS code uses iph.len from\nip_vs_fill_iph_skb(), where ipv6_find_hdr() has already skipped\nextension headers and found the real transport header.\n\nThis makes the state machine read from the wrong offset for IPv6 SCTP\npackets that carry extension headers. For example, an INIT packet with an\n8-byte destination options header can be scheduled correctly by\nsctp_conn_schedule(), but set_sctp_state() reads the first byte of the\nSCTP verification tag as a DATA chunk type. The connection then moves\nfrom NONE to ESTABLISHED instead of INIT1, gets the longer established\ntimeout, and updates the active/inactive destination counters\nincorrectly. This happens even though the SCTP handshake has not\ncompleted.\n\nUse the parsed transport offset passed down from ip_vs_set_state() for\nthe SCTP chunk-header lookup. For IPv4 and IPv6 packets without\nextension headers this preserves the existing offset.(CVE-2026-72021)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nieee802154: admin-gate legacy LLSEC dump operations\n\nIn net/ieee802154/netlink.c, the legacy IEEE802154_NL family ops table\nbuilds the LLSEC dump entries (LLSEC_LIST_KEY, LLSEC_LIST_DEV,\nLLSEC_LIST_DEVKEY, LLSEC_LIST_SECLEVEL) with IEEE802154_DUMP() which\nsets no .flags, so generic netlink runs them ungated. The modern\nnl802154 family admin-gates the equivalent reads via\nNL802154_CMD_GET_SEC_KEY and friends with .flags = GENL_ADMIN_PERM.\n\nAny local uid that can open AF_NETLINK / NETLINK_GENERIC can resolve\nthe \u0026quot;802.15.4 MAC\u0026quot; family and dump LLSEC_LIST_KEY on any wpan netdev\nthat has an LLSEC key installed; the dump handler writes the raw\n16-byte AES-128 key bytes (IEEE802154_ATTR_LLSEC_KEY_BYTES, copied\nverbatim from struct ieee802154_llsec_key.key) into the reply.\nRecovering the AES key compromises 802.15.4 LLSEC link confidentiality\nand authenticity, since LLSEC uses CCM* and the same key authenticates\nand encrypts frames.\n\nImpact: any local uid with no capabilities can read the raw 16-byte\nAES-128 LLSEC key from the kernel keytable on any wpan netdev that has\nan administrator-installed LLSEC key, by issuing an LLSEC_LIST_KEY\ndump on the legacy IEEE802154_NL generic-netlink family.\n\nIntroduce IEEE802154_DUMP_PRIV() mirroring IEEE802154_DUMP() but\nsetting .flags = GENL_ADMIN_PERM, and use it for the four LLSEC dump\nentries. LIST_PHY and LIST_IFACE retain IEEE802154_DUMP() because the\nmodern nl802154 family exposes their equivalents to unprivileged\nreaders by design (NL802154_CMD_GET_WPAN_PHY and\nNL802154_CMD_GET_INTERFACE carry \u0026quot;can be retrieved by unprivileged\nusers\u0026quot; annotations).(CVE-2026-72049)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nip6gre_changelink() and ip6erspan_changelink() operate on at most two\nnetns, dev_net(dev) and the tunnel link netns t-\u0026gt;net. They differ once\nthe device is created in or moved to a netns other than the one the\nrequest runs in. The rtnl changelink path checks CAP_NET_ADMIN only\nagainst dev_net(dev), so a caller privileged there but not in t-\u0026gt;net can\nrewrite a tunnel that lives in t-\u0026gt;net.\n\nGate both ops on rtnl_dev_link_net_capable() at their top, before any\nattribute is parsed.(CVE-2026-72052)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipip: require CAP_NET_ADMIN in the device netns for changelink\n\nipip_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u0026gt;net. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u0026gt;net can rewrite a tunnel that\nlives in t-\u0026gt;net.\n\nGate ipip_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.(CVE-2026-72053)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink\n\nvti_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u0026gt;net. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u0026gt;net can rewrite a tunnel that\nlives in t-\u0026gt;net.\n\nGate vti_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.(CVE-2026-72054)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: sit: require CAP_NET_ADMIN in the device netns for changelink\n\nipip6_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u0026gt;net. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u0026gt;net can rewrite a tunnel that\nlives in t-\u0026gt;net.\n\nGate ipip6_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed. sit was the one tunnel type not covered\nby the recent series that added this check to the other changelink()\nhandlers.(CVE-2026-72061)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete\n\nWhen an offloaded MACsec RX SC is deleted, macsec_del_rxsc_ctx() freed\nthe per-SC metadata_dst with metadata_dst_free(), which kfree()s the\nobject unconditionally and ignores the dst reference count. The RX\ndatapath in mlx5e_macsec_offload_handle_rx_skb() looks up the SC under\nrcu_read_lock() via xa_load(), takes a reference with dst_hold() and\nattaches the dst to the skb with skb_dst_set(). A reader that already\nobtained the rx_sc pointer can race with the delete path and operate on\nfreed memory.\n\nFix the owner side by dropping the reference with dst_release() instead\nof freeing unconditionally, and convert the RX datapath to\ndst_hold_safe() so a reader racing the SC delete cannot attach a dst\nwhose last reference was just dropped; only attach it when a reference\nwas actually taken.\n\nmlx5e_macsec_add_rxsc() also published sc_xarray_element via xa_alloc()\nbefore rx_sc-\u0026gt;md_dst was allocated and initialised, so a datapath reader\nthat looked the SC up by fs_id could observe rx_sc with md_dst still\nNULL or, on weakly-ordered architectures, a non-NULL md_dst pointer\nwhose contents were not yet visible. NULL-check the xa_load() result and\nmd_dst on the datapath, and reorder add_rxsc() so the xa_alloc() publish\nhappens only after md_dst is fully initialised; the xarray RCU publish\nthen pairs with the rcu_read_lock()/xa_load() in the datapath.\n\nNote: macsec_del_rxsc_ctx() also kfree()s rx_sc-\u0026gt;sc_xarray_element\nwithout an RCU grace period while the same datapath reads it under\nrcu_read_lock(); that is a separate pre-existing issue left to a\nfollow-up patch.\n\nFound by 0sec automated security-research tooling (https://0sec.ai).(CVE-2026-72072)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: handle inline data with a nonzero offset\n\nnvmet_rdma_use_inline_sg() maps the host-controlled inline data offset\ninto the per-command inline scatterlist.  The bounds check admits any\noffset with off + len \u0026lt;= inline_data_size, but the mapping still assumes\nthe data begins in the first inline page:\n\n\tsg-\u0026gt;offset = off;\n\tsg-\u0026gt;length = min_t(int, len, PAGE_SIZE - off);\n\nWhen a port is configured with inline_data_size \u0026gt; PAGE_SIZE (settable up\nto max(SZ_16K, PAGE_SIZE)), an offset in (PAGE_SIZE, inline_data_size]\nmakes \u0026quot;PAGE_SIZE - off\u0026quot; underflow, so sg-\u0026gt;length is set to ~4 GiB and\nthe block backend reads far past the first inline page.  num_pages(len)\nalso ignores the offset, so an in-bounds offset whose [off, off+len)\nspan crosses a page boundary under-counts the scatterlist.\n\nMap the offset properly: split it into a page index and an in-page\noffset, start the scatterlist at that page, and size the page count from\npage_off + len.  Because the request scatterlist may now start at\ninline_sg[page_idx] rather than inline_sg[0], generalize the inline-SGL\nidentity test in nvmet_rdma_release_rsp() to a range test; otherwise the\npersistent inline scatterlist is mistaken for an allocated one and\nnvmet_req_free_sgls() frees an inline page (and warns in\nfree_large_kmalloc()).(CVE-2026-72129)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u0026gt;f_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.(CVE-2026-72135)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink\n\nxfrmi_changelink() operates on at most two netns, dev_net(dev) and the\ninterface link netns xi-\u0026gt;net. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in xi-\u0026gt;net can rewrite an interface that\nlives in xi-\u0026gt;net.\n\nGate xfrmi_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.(CVE-2026-72136)\n\nIn the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding frame_count. tbnet_poll() assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment. A packet of frame_count frames therefore ends up with frame_count - 1 fragments. tbnet_check_frame() only bounds the peer supplied frame_count to TBNET_RING_SIZE / 4 (64), which is far above MAX_SKB_FRAGS (17 by default). A peer that sends a packet of 19 or more small frames pushes nr_frags past MAX_SKB_FRAGS, so skb_add_rx_frag() writes past skb_shinfo()-\u0026gt;frags[] and corrupts memory after the shared info.(CVE-2026-72157)\n\nIn the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE. If DAX memory is hotplugged into an unoccupied subsection of an early section, section_activate() reuses the unoptimized boot memmap. However, compound_nr_pages() still assumes that vmemmap optimization is in effect and initializes only the reduced number of struct pages. As a result, the remaining tail struct pages are left uninitialized, which can later lead to unexpected behavior or crashes. Fix this by treating early sections as unoptimized when calculating how many struct pages to initialize.(CVE-2026-72172)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Bound-check xdr_buf_to_bvec() stores before writing\n\nxdr_buf_to_bvec() writes a bio_vec into the caller\u0026apos;s array before\ntesting whether that slot is in range, and the head branch performs\nthe store with no check at all. When the caller\u0026apos;s budget is exactly\nused up, the next store lands one element past the end of the array.\nThe overflow label returns count - 1, which masks the surplus store\nbut cannot undo it.\n\nrq_bvec, the array passed by nfsd_vfs_write(), is allocated to\nexactly rq_maxpages entries with no slack. The OOB store can land in\nadjacent slab memory; the bv_len and bv_offset fields written there\nare derived from client-supplied RPC payload sizes.\n\nMove the in-range check ahead of the store in the head, page-loop,\nand tail branches. With the check at the top of each sequence, count\nis incremented only after a successful store, so the overflow label\ncan return count directly.(CVE-2026-72217)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: wait for in-flight TLS handshake callback when cancel loses race\n\nWhen wait_for_completion_interruptible_timeout() in\nsvc_tcp_handshake() returns 0 (timeout) or -ERESTARTSYS (signal) and\ntls_handshake_cancel() then returns false, handshake_complete() has\nwon the cancellation race: it has set HANDSHAKE_F_REQ_COMPLETED and\nis about to invoke svc_tcp_handshake_done(), but the callback\u0026apos;s\nside effects on xpt_flags and on svsk-\u0026gt;sk_handshake_done have not\nyet committed.\n\nThe current code reads xpt_flags immediately to decide whether the\nsession succeeded. Two races result.\n\nIf the callback has executed set_bit(XPT_TLS_SESSION) but not yet\nclear_bit(XPT_HANDSHAKE), svc_tcp_handshake() sees a session,\nenqueues the transport, and returns. svc_xprt_received() then\nclears XPT_BUSY, a worker thread picks the transport up, the\ndispatcher in svc_handle_xprt() observes XPT_HANDSHAKE still set,\nand xpo_handshake is invoked a second time. That svc_tcp_handshake()\ncalls init_completion(\u0026amp;svsk-\u0026gt;sk_handshake_done) while the original\ncallback concurrently calls complete_all() on it, corrupting the\nembedded swait_queue.\n\nIf the callback has set HANDSHAKE_F_REQ_COMPLETED but not yet\nentered svc_tcp_handshake_done(), svc_tcp_handshake() reads\nXPT_TLS_SESSION as clear and tears the connection down even though\nthe handshake is about to succeed.\n\nWait for the callback to commit before inspecting xpt_flags. The\ncompletion is guaranteed to fire because handshake_complete()\ninvokes svc_tcp_handshake_done() unconditionally once it has set\nHANDSHAKE_F_REQ_COMPLETED.(CVE-2026-72221)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: pin svc_xprt across the asynchronous TLS handshake callback\n\nsvc_tcp_handshake() stores the raw svc_xprt pointer in\ntls_handshake_args.ta_data and submits the request through\ntls_server_hello_x509(). The handshake core takes only\nsock_hold(req-\u0026gt;hr_sk); nothing references the embedding struct\nsvc_sock that svc_tcp_handshake_done() reaches via container_of().\n\nTwo close races leave the in-flight callback writing through a freed\nsvc_sock. svc_sock_free() calls tls_handshake_cancel() and discards\nits return value: a false return means handshake_complete() has\nalready set HANDSHAKE_F_REQ_COMPLETED but hp_done() may not have\nfinished, yet svc_sock_free() proceeds to kfree(svsk). The\ncancel-loser fall-through inside svc_tcp_handshake() itself produces\nthe same window: when wait_for_completion_interruptible_timeout()\nreturns \u0026lt;= 0 (timeout or signal) and tls_handshake_cancel() returns\nfalse, the function does not drain, returns, and svc_handle_xprt()\ncalls svc_xprt_received(), which clears XPT_BUSY and can drop the\nlast reference. A concurrent close then runs svc_sock_free() while\nsvc_tcp_handshake_done() is still updating xpt_flags and walking\nsvsk-\u0026gt;sk_handshake_done.\n\nThe corruption surfaces as set_bit/clear_bit RMW into the freed\nxpt_flags slab slot and as complete_all() walking and writing the\nfreed wait_queue_head_t list embedded in sk_handshake_done -- a\nslab-corruption primitive, not a benign read. The path is reachable\non any TLS-enabled NFS server whenever a connection close overlaps\nthe tlshd downcall delivery window; the interruptible wait means\nsignal delivery suffices, not just SVC_HANDSHAKE_TO expiry.\n\nTake svc_xprt_get(xprt) immediately before tls_server_hello_x509()\nso the in-flight callback owns its own reference. Release it on the\ntwo edges where the callback is guaranteed not to fire -- submission\nfailure from tls_server_hello_x509() and a successful\ntls_handshake_cancel() -- and at the tail of\nsvc_tcp_handshake_done() after complete_all().\n\n[cel: rewrote commit message to describe the actual change](CVE-2026-72222)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: retrieve ethhdr after potential skb realloc on RX\n\npskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind\nthe skb. Variables which were pointing to the old buffer need to be\nreassigned to avoid an use-after-free.\n\nThis was done correctly for the VLAN header but missed for the ethernet\nheader which is later used for the TT and AP isolation handling.(CVE-2026-72235)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Move kvm_io_bus_get_dev() locking responsibilities to callers\n\nkvm_io_bus_get_dev() returns a device that is only matched by the\naddress, and nothing else. This can cause a lifetime issue if\nthe matched device is not the expected type, as by the time\nthe caller can introspect the object, it might be gone (the srcu\nlock having been dropped).\n\nGiven that there is only a single user of this helper, the simplest\noption is to move the locking responsibility to the caller, which\ncan keep the srcu lock held for as long as it wants.\n\nNote that this aligns with other kvm_io_bus*() helpers, which\nalready require the srcu lock to be held by the callers.(CVE-2026-72282)\n\nIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check. smb2_ioctl_query_info() validates the PASSTHRU_FSCTL response payload before copying it to userspace. The payload offset and length both come from 32-bit fields. The bounds check currently adds OutputOffset and qi.input_buffer_length directly, so the addition can wrap in 32-bit arithmetic before the result is compared against the response buffer length. A malicious server can use a large OutputOffset and a small OutputCount to make the wrapped sum pass the bounds check. The later copy_to_user() then reads from io_rsp + OutputOffset, outside the response buffer, leading to an out-of-bounds read.(CVE-2026-72310)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndm era: fix NULL pointer dereference in metadata_open()\n\nmetadata_open() returns NULL when kzalloc_obj() fails, but the\ncaller era_ctr() only checks IS_ERR(md).  Since IS_ERR(NULL)\nreturns false, the NULL pointer is treated as a valid result\nand later assigned to era-\u0026gt;md, leading to a NULL pointer\ndereference when the metadata is accessed.\n\nFix this by returning ERR_PTR(-ENOMEM) on allocation failure,\nconsistent with dm-cache-metadata.c, dm-thin-metadata.c, and\ndm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the\nsame pattern.(CVE-2026-72316)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: pin upper rpc_clnt across the TLS connect_worker\n\nThe TLS connect path has a use-after-free: nothing pins the\nupper rpc_clnt across the delayed connect_worker. xs_connect()\nstores task-\u0026gt;tk_client in sock_xprt::clnt as a raw pointer\nand queues the worker; for TLS-secured transports that worker\nis xs_tcp_tls_setup_socket(), which reads several fields out\nof the saved pointer (cl_timeout, cl_program, cl_prog,\ncl_vers, cl_cred, cl_stats) to construct the args for the\ninner handshake rpc_clnt.\n\nThe xprt does not reference the rpc_clnt; the rpc_clnt\nreferences the xprt. xs_destroy() does cancel the\nconnect_worker, but it runs only when the xprt\u0026apos;s refcount\ndrops to zero, which cannot happen until the rpc_clnt\nreleases its cl_xprt reference in rpc_free_client_work().\nWhen a TLS handshake fails fatally (for example, an mTLS\nmount whose client cert does not match the server), the\nconnecting task is woken with -EACCES and exits, the mount\ncaller invokes rpc_shutdown_client(), and the upper rpc_clnt\nis freed before the queued connect_worker fires.\nxs_tcp_tls_setup_socket() then dereferences the freed clnt,\nproducing the refcount_t underflow Michael Nemanov reported.\n\nTake a reference on the upper rpc_clnt in xs_connect() for\nTLS transports via a new rpc_hold_client() helper, and drop\nit in the connect_worker\u0026apos;s exit path with rpc_release_client().\nThe xprt_lock_connect() / xprt_unlock_connect() pairing\nalready serialises xs_connect() with xs_tcp_tls_setup_socket(),\nso the take and release are balanced one-for-one.\n\nThe non-TLS connect worker (xs_tcp_setup_socket) never reads\nsock_xprt::clnt, so leave that path alone and avoid the\nclnt-holds-xprt-holds-clnt cycle that would otherwise prevent\nxprt destruction.(CVE-2026-72317)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncifs: validate DFS referral string offsets\n\nparse_dfs_referrals() validates that the response header and referral\narray fit in the received buffer, but each referral also contains string\noffsets supplied by the server.\n\nThose offsets are used to compute the DfsPath and NetworkAddress string\npointers without checking whether they still point inside the response\nbuffer. A malformed referral can therefore make the computed pointer\nexceed the end of the buffer. The resulting negative max_len is then\npassed to cifs_strndup_from_utf16(), and the non-Unicode path forwards it\nto kstrndup() as a size_t, allowing strnlen() to read out of bounds.\n\nValidate each string offset before deriving the string pointer.(CVE-2026-72318)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipvs: ensure inner headers in ICMP errors are in headroom\n\nSashiko points out that after stripping the outer headers\nwith pskb_pull() we should ensure the inner IP headers\nin ICMP errors from tunnels are present in the skb headroom\nfor functions like ipv4_update_pmtu(), icmp_send() and\nIP_VS_DBG().\n\nAlso, add more checks for the length of the inner headers.(CVE-2026-72319)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/tls: Consume empty data records in tls_sw_read_sock()\n\nA peer may send a zero-length TLS application_data record; TLS 1.3\nexplicitly permits these as a traffic-analysis countermeasure (RFC\n8446, Section 5.1). After decryption such a record has full_len ==\n0. tls_sw_read_sock() hands it to the read_actor, which has no\npayload to consume and returns zero. The loop treats a zero return\nas backpressure (used \u0026lt;= 0), requeues the skb at the head of\nrx_list, and stops. rx_list is serviced head-first on the next\ncall, so the empty record is dequeued, fails the same way, and is\nrequeued again; every later record on the connection is blocked\nbehind it.\n\ntls_sw_recvmsg() does not stall on this: a zero-length data record\ncopies nothing and falls through to consume_skb(). Mirror that in\nthe read_sock() path by recognizing an empty data record before\nthe actor runs, consuming it, and continuing.(CVE-2026-72330)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nqede: fix off-by-one in BD ring consumption on build_skb failure\n\nqede_rx_build_skb() and qede_tpa_rx_build_skb() do not check for a\nNULL return from qede_build_skb(). When it returns NULL under memory\npressure, the functions still consume a BD from the ring before\nreturning NULL. The callers then recycle additional BDs, resulting in\none extra BD being consumed (off-by-one). This desynchronizes the BD\nring, which can corrupt DMA page reference counts and lead to SLUB\nfreelist corruption.\n\nCommit 4e910dbe3650 (\u0026quot;qede: confirm skb is allocated before using\u0026quot;)\nadded a NULL check inside qede_build_skb() to prevent a NULL pointer\ndereference, but did not address the missing NULL checks in the\ncallers, making this off-by-one reachable.\n\nFix this by adding NULL checks for the return value of\nqede_build_skb() in both qede_rx_build_skb() and\nqede_tpa_rx_build_skb(), returning NULL immediately before any BD ring\nmanipulation.(CVE-2026-72339)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix HV VHCA stats agent registration race\n\nmlx5e_hv_vhca_stats_create() registers the stats agent through\nmlx5_hv_vhca_agent_create(). The helper publishes the agent in\nhv_vhca-\u0026gt;agents[type] under agents_lock and immediately schedules an\nasynchronous control invalidation on the HV VHCA workqueue before\nreturning to mlx5e.\n\nThe asynchronous invalidation invokes the control agent\u0026apos;s invalidate\ncallback, which reads the hypervisor control block and forwards the\ncommand to mlx5e_hv_vhca_stats_control(). That callback may either:\n\n  - call cancel_delayed_work_sync(\u0026amp;priv-\u0026gt;stats_agent.work), or\n  - call queue_delayed_work(priv-\u0026gt;wq, \u0026amp;sagent-\u0026gt;work, sagent-\u0026gt;delay).\n\nHowever, the delayed_work and priv-\u0026gt;stats_agent.agent are only\ninitialized after mlx5_hv_vhca_agent_create() returns to mlx5e:\n\n    agent = mlx5_hv_vhca_agent_create(...);   /* publish + invalidate */\n    ...\n    priv-\u0026gt;stats_agent.agent = agent;          /* too late */\n    INIT_DELAYED_WORK(\u0026amp;priv-\u0026gt;stats_agent.work, ...); /* too late */\n\nIf the asynchronous control path runs before the two assignments\nabove, it can:\n\n  - Operate on an uninitialized delayed_work whose timer.function is\n    NULL. queue_delayed_work() calls add_timer() unconditionally, so\n    when the timer expires the timer softirq invokes a NULL function\n    pointer.\n  - Re-initialize the timer later through INIT_DELAYED_WORK() while\n    the timer is already enqueued in the timer wheel, corrupting the\n    hlist (entry.pprev cleared while the previous bucket node still\n    points at this entry).\n  - When the worker eventually runs, mlx5e_hv_vhca_stats_work() reads\n    sagent-\u0026gt;agent (NULL) and dereferences it inside\n    mlx5_hv_vhca_agent_write().\n\nFix this by:\n\n  - Initializing priv-\u0026gt;stats_agent.work before invoking\n    mlx5_hv_vhca_agent_create(), so the work is always in a valid\n    state when the control callback observes it.\n  - Adding a struct mlx5_hv_vhca_agent **ctx_update out-parameter\n    to mlx5_hv_vhca_agent_create(). The helper writes the agent\n    pointer to *ctx_update before publishing into hv_vhca-\u0026gt;agents[]\n    and triggering the agents_update flow, so any callback\n    subsequently invoked from that flow already sees a valid\n    priv-\u0026gt;stats_agent.agent. This avoids having the control\n    callback participate in agent initialization.\n\nWhile at it, access priv-\u0026gt;stats_agent.agent with\nREAD_ONCE()/WRITE_ONCE() for the cross-CPU access with the worker, and\nclear priv-\u0026gt;stats_agent.buf on the agent_create() failure path.(CVE-2026-72342)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbridge: stp: Fix a potential use-after-free when deleting a bridge\n\nThe three STP timers are not supposed to be armed while the bridge is\nadministratively down. They are synchronously deactivated when the\nbridge is put administratively down and the various call sites check for\n\u0026apos;IFF_UP\u0026apos; before arming them.\n\nThis check is missing from br_topology_change_detection() and it is\npossible to engineer a situation in which the topology change timer is\narmed while the bridge is administratively down, resulting in a\nuse-after-free [1] when the bridge is deleted.\n\nFix by adding the missing check and for good measures synchronously\nshutdown the three timers when the bridge is deleted.\n\n[1]\nODEBUG: free active (active state 0) object: ffff88811662b9b0 object type: timer_list hint: br_topology_change_timer_expired (net/bridge/br_stp_timer.c:120)\nWARNING: lib/debugobjects.c:629 at debug_print_object+0x1bc/0x450, CPU#9: ip/359(CVE-2026-72389)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nseg6: validate SRH length before reading fixed fields\n\nseg6_validate_srh() reads fixed SRH fields such as srh-\u0026gt;type and\nsrh-\u0026gt;hdrlen before checking that the supplied length covers the fixed\nstruct ipv6_sr_hdr fields.\n\nThe BPF SEG6 encap path reaches this with a BPF program-supplied pointer\nand length: bpf_lwt_push_encap() and the SEG6 local BPF END_B6 and\nEND_B6_ENCAP actions call bpf_push_seg6_encap(), which forwards the\nlength to seg6_validate_srh() with no minimum-size guard.  A 2-byte SEG6\nencap header can therefore make the validator read srh-\u0026gt;type at offset 2\nbeyond the caller-supplied buffer.\n\nReject lengths shorter than the fixed SRH at the top of\nseg6_validate_srh(), before any field is read.  This fixes the BPF helper\npath and keeps the common validator robust.(CVE-2026-72400)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()\n\nResetting all VFs causes resource leak on VFs with FDIR filters\nenabled as CTRL VSIs are only invalidated and not freed. Fix by using\nice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which\naligns behavior with the ice_reset_vf() function.\n\nReproduction:\n  echo 1 \u0026gt; /sys/class/net/$pf/device/sriov_numvfs\n  ethtool -N $vf flow-type ether proto 0x9000 action 0\n  echo 1 \u0026gt; /sys/class/net/$pf/device/reset(CVE-2026-72425)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: validate selector family and prefixlen during match\n\nsyzbot reported a shift-out-of-bounds in xfrm_selector_match()\ndue to AF_UNSPEC selector with large prefixlen (e.g. 128) matched\nagainst IPv4 flow (when XFRM_STATE_AF_UNSPEC is set).\n\nFix this by:\n\n- Rejecting mismatched families in xfrm_selector_match.\n- Returning false in addr4_match if prefixlen \u0026gt; 32.\n- Returning false in addr_match if prefixlen \u0026gt; 128 (prevents overflow).(CVE-2026-72450)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\napparmor: aa_label_alloc use aa_label_free on alloc failure\n\naa_label_alloc() allocates a secid before allocating or taking the label\nproxy. If the later proxy step fails, the error path only freed the label\nmemory, leaking any resources initialized by aa_label_init().\n\nUse aa_label_free() on the failure path so partially initialized labels\nrelease their secid and other label resources before the backing memory is\nfreed.(CVE-2026-72459)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\napparmor: check label build before no_new_privs test\n\naa_change_profile() builds a replacement label with\nfn_label_build_in_scope() before the no_new_privs subset check. The build\nhelper can fail and return NULL or an ERR_PTR, but the result was passed\nto aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL()\ncheck.\n\nReuse the existing target-label build failure handling immediately after\nthe build. This preserves the current audit handling while preventing the\nsubset helper from dereferencing an invalid label.(CVE-2026-72460)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Repost Receive buffers for malformed replies\n\nrpcrdma_wc_receive() decrements the transport\u0026apos;s Receive count for\nevery completion before it dispatches a successful Receive to\nrpcrdma_reply_handler(). The handler must post a replacement\nReceive WR before returning unless ownership of the rep has moved\nelsewhere, as on the backchannel path.\n\nCommit 2ae50ad68cd7 (\u0026quot;xprtrdma: Close window between waking RPC\nsenders and posting Receives\u0026quot;) moved the Receive refill out of\nrpcrdma_wc_receive(), where it had run ahead of every reply, into\nrpcrdma_reply_handler() so that the responder\u0026apos;s credit grant could\nbe parsed before reposting. The bad-version and short-reply exits\nnever reach that refill: they recycle the rep and return without\ncalling rpcrdma_post_recvs().\n\nA remote peer can therefore drain the client\u0026apos;s posted Receive\nqueue by sending a sustained stream of replies that are shorter\nthan the fixed transport header or that carry an unrecognized\nRPC/RDMA version. Each such reply consumes one posted Receive\nwithout replacing it. Once the queue empties, the peer\u0026apos;s next\nSend finds no posted Receive and the transport stalls until\nreconnect.\n\nRoute both malformed-reply exits through the shared repost tail\nafter recycling the rep, refilling against buf-\u0026gt;rb_credits, the\nmost recent accepted credit grant. Neither exit updates the\ncongestion window, so RPCs admitted under the previous grant\nremain in flight awaiting replies. A smaller refill target would\nlet a stream of malformed replies ratchet the posted Receive count\ndown to the batch floor while the congestion window still admits\nrb_credits RPCs; a burst of valid replies to those RPCs could then\noverrun the posted Receives, and because the client connects with\nrnr_retry_count of zero, a single RNR NAK terminates the\nconnection. Refilling against rb_credits also restores the target\nthat applied to malformed replies before commit 2ae50ad68cd7\n(\u0026quot;xprtrdma: Close window between waking RPC senders and posting\nReceives\u0026quot;) when rpcrdma_post_recvs() computed it from rb_credits\ninternally. rb_credits is at least one from connection\nestablishment onward, so the repost path always keeps Receives\nposted.(CVE-2026-72464)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Fix bcall rep leak and unbounded peek\n\nrpcrdma_is_bcall() decodes a reply\u0026apos;s first words to decide whether\nthe frame is a backchannel call. Two issues in that decode path\nlet a short or malformed reply leak the receive buffer and drain\nthe Receive queue.\n\nFirst, the speculative peek\n\n    p = xdr_inline_decode(xdr, 0);\n    /* five p++ reads follow */\n\nasks xdr_inline_decode() for zero bytes, which returns xdr-\u0026gt;p\nwithout consulting xdr-\u0026gt;end. The five subsequent __be32 reads can\nthen walk up to 20 bytes past the wire payload into stale regbuf\ncontents and misclassify the reply as a backchannel call.\n\nSecond, after the post-peek\n\n    p = xdr_inline_decode(xdr, 3 * sizeof(*p));\n    if (unlikely(!p))\n            return true;\n\nthe short-header arm returns true without calling\nrpcrdma_bc_receive_call(). The contract with the caller is that a\ntrue return transfers ownership of rep to the backchannel path:\n\n    rpcrdma_reply_handler()\n      if (rpcrdma_is_bcall(r_xprt, rep))\n              return;        /* bare return, skips out_post */\n      ...\n    out_post:\n      rpcrdma_post_recvs(r_xprt, credits + ...);\n\nBecause rpcrdma_bc_receive_call() never ran, no one took rep, but\nrpcrdma_reply_handler still bare-returns past rpcrdma_rep_put()\nand rpcrdma_post_recvs(). The rep, with its persistently\nDMA-mapped receive buffer, is orphaned on rb_all_reps and freed\nonly at transport teardown. This completion reposts nothing, so\nits slot is reclaimed only when a later forward-channel reply\nreaches out_post and rpcrdma_post_recvs() allocates a fresh rep to\nbackfill; absent that traffic the Receive queue drains and the\npeer\u0026apos;s Sends draw RNR NAKs.\n\nFix by consulting xdr-\u0026gt;end after the zero-length peek so the five\n__be32 reads cannot run unless 20 bytes of wire payload remain. A\nbyte-precise comparison against xdr-\u0026gt;end is required because a\nnon-4-aligned receive rounds the stream\u0026apos;s word count up past the\ntrue payload. Also return false from the short-header arm so the\nreply falls through the normal out_norqst cleanup chain\n(rpcrdma_rep_put() plus rpcrdma_post_recvs()).(CVE-2026-72466)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Decouple req recycling from RPC completion\n\nrl_kref formerly served two distinct lifetimes through a single\nrefcount: it gated when a Reply could wake its RPC task, and it\ngated when an rpcrdma_req could return to its free pool. The\nmarshal path took the Send-side reference only when SGEs needed\nDMA-unmap (sc_unmap_count \u0026gt; 0), which made a Send carrying only\npre-registered buffers an exception: the Reply handler dropped\nrl_kref from 1 to 0 and freed the req while the HCA might still\nbe DMA-reading from its send buffer.\n\nGive rl_kref a narrower job. The RPC layer takes one reference\nwhen slot allocation hands a req out. rpcrdma_prepare_send_sges()\ntakes a Send-side reference unconditionally after WR preparation\nsucceeds. xprt_rdma_free_slot() and xprt_rdma_bc_free_rqst() drop\nthe RPC-layer reference; rpcrdma_sendctx_unmap() drops the\nSend-side reference. The req returns to its free pool only after\nboth owners have signed off.\n\nThe existing kref_init(\u0026amp;req-\u0026gt;rl_kref) call in\nrpcrdma_prepare_send_sges() is removed. Initialization moves to\nthe slot-allocation paths (xprt_rdma_alloc_slot and\nrpcrdma_bc_rqst_get), and the release callback re-arms rl_kref\nbefore the req returns to a free pool. A re-init in the marshal\npath would discard the RPC-layer reference that already exists\non entry.\n\nThree invariants follow:\n\n  - Any rpcrdma_req held by an rpc_rqst has rl_kref \u0026gt;= 1.\n    xprt_rdma_alloc_slot(), rpcrdma_bc_rqst_get(), and the\n    backlog-wake branch in xprt_rdma_alloc_slot() each kref_init\n    rl_kref before publishing the req. Without this invariant,\n    an RPC task that aborts between slot allocation and marshal\n    (gss_refresh failure or signal during call_connect, for\n    example) would drive xprt_release() -\u0026gt;\n    xprt_rdma_free_slot() -\u0026gt; kref_put against a refcount of\n    zero, saturating refcount_t and stranding the slot.\n\n  - The Send-side reference is taken only after WR prep\n    succeeds. A mapping failure in rpcrdma_prepare_send_sges()\n    runs rpcrdma_sendctx_cancel(), which DMA-unmaps the sendctx\n    and clears sc_req without touching rl_kref. The sendctx\n    ring walks in rpcrdma_sendctx_put_locked() and\n    rpcrdma_sendctxs_destroy() skip entries with sc_req == NULL,\n    so a burst of -EIO marshal failures cannot hold reqs off\n    rb_send_bufs.\n\n  - The release callback re-arms rl_kref so the next consumer\n    enters with the invariant satisfied.\n\nReplies now complete the RPC directly. rpcrdma_reply_handler()\ncalls rpcrdma_complete_rqst() in place of kref_put on the\nnon-LocalInv branch. The LocalInv branch already completes the\nRPC from frwr_unmap_async() and is unaffected.\n\nBecause Send-side references can now outlive RPC completion,\nconnection teardown drains sendctx entries whose unsignaled\nSends never had a later signaled completion to walk the ring.\nrpcrdma_sendctxs_destroy() walks the active range and runs\nrpcrdma_sendctx_unmap() on each entry with a non-NULL sc_req\nbefore the request buffers are reset, and is moved ahead of\nrpcrdma_reqs_reset() in rpcrdma_xprt_disconnect() so the reqs\nare still in their pre-reset state when the Send-side refs are\nreleased.\n\nThe drain creates a teardown-ordering hazard on the backchannel\npath. With the new lifetime, releasing a bc_prealloc req from\nrpcrdma_req_release() re-adds it to bc_pa_list. The disconnect\nin xprt_rdma_destroy() runs after xprt_destroy_backchannel() has\nalready emptied bc_pa_list, so the drained reqs would otherwise\nleak. xprt_rdma_destroy() now runs xprt_rdma_bc_destroy(xprt, 0)\na second time after the disconnect to reclaim them.(CVE-2026-72473)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: core: fix supplied_from allocations\n\nIf dts property power-supplies has multiple values, then accessing to\npsy-\u0026gt;supplied_from[i-1] in __power_supply_populate_supplied_from will\noverrun supplied_from array.(CVE-2026-74271)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntipc: require net admin for TIPCv2 netlink mutators\n\nTIPCv2 registers mutating generic-netlink operations without admin\npermission flags. Generic netlink only checks CAP_NET_ADMIN when an\noperation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local\nunprivileged process can currently change TIPC state through commands\nsuch as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and\nbearer enable/disable.\n\nThe legacy TIPC netlink API already checks netlink_net_capable(...,\nCAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators\nthe equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which\nmaps to the same namespace-aware CAP_NET_ADMIN check that\nnetlink_net_capable() performs, so the behaviour matches the legacy\npath and keeps working for CAP_NET_ADMIN holders in a non-initial user\nnamespace (containers).\n\nA QEMU/KASAN repro run as uid/gid 65534 with zero effective\ncapabilities previously succeeded in changing the network id and node\nidentity, setting and flushing key material, and enabling/disabling a\nUDP bearer. With this patch applied the same operations fail with\n-EPERM.(CVE-2026-74283)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate embedded address parameter length\n\nsctp_verify_asconf() and sctp_verify_param() only validate ADD_IP, DEL_IP,\nand SET_PRIMARY parameters against a fixed minimum size of sizeof(struct\nsctp_addip_param) + sizeof(struct sctp_paramhdr). This ensures the outer\nparameter is large enough to contain an embedded address parameter header,\nbut does not verify that the embedded address parameter\u0026apos;s declared length\nfits within the bounds of the outer parameter.\n\nLater, sctp_process_param() and sctp_process_asconf_param() extract the\nembedded address parameter and pass it to af-\u0026gt;from_addr_param(), which uses\nthe address parameter length to parse the variable-length address payload.\nA malformed peer can therefore advertise an embedded address parameter\nlength that exceeds the remaining bytes in the enclosing parameter.\n\nValidate that addr_param-\u0026gt;p.length does not exceed the space available\nafter the sctp_addip_param header before processing the embedded address\nparameter. Reject malformed parameters when the embedded address length\nextends beyond the enclosing parameter bounds.\n\nThis prevents out-of-bounds reads when parsing malformed parameters carried\nin INIT or ASCONF processing paths.(CVE-2026-74287)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Tighten cgroup storage cookie checks for prog arrays\n\nThe fix in commit abad3d0bad72 (\u0026quot;bpf: Fix oob access in cgroup local\nstorage\u0026quot;) is still incomplete. The prog-array compatibility check\ntreats a program with no cgroup storage as compatible with any stored\nstorage cookie. This allows a storage-less program to bridge a tail\ncall chain between an entry program and a storage-using callee even\nthough cgroup local storage at runtime still follows the caller\u0026apos;s\ncontext, that is, A -\u0026gt; B(no storage) -\u0026gt; C(storage) path.\n\nRequiring exact cookie equality would break the legitimate case of a\nstorage-less leaf program being tail called from a storage-using one.\nInstead, only accept a zero storage cookie if the program cannot\nperform tail calls itself. This keeps A -\u0026gt; B(no storage) working\nwhile rejecting the A -\u0026gt; B(no storage) -\u0026gt; C(storage) bridge.(CVE-2026-74305)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Copy WQE to local buffer in non-SRQ receive path\n\nFor non-SRQ QPs, the responder reads WQE fields directly from the\nshared queue buffer mapped into userspace. This allows a malicious\nuser to modify fields like num_sge or sge entries while the kernel\nis processing the WQE, leading to out-of-bounds reads in\nrxe_resp_check_length() and copy_data().\n\nIntroduce get_recv_wqe() that validates num_sge and copies the WQE\nto a kernel-local buffer before processing, matching the approach\nalready used for SRQ WQEs in get_srq_wqe(). The srq_wqe buffer is\nreused since SRQ and non-SRQ paths are mutually exclusive per QP.(CVE-2026-74377)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe\n\nget_srq_wqe() reads wqe-\u0026gt;dma.num_sge from the shared receive queue\nbuffer, which is mapped into userspace. It validates num_sge against\nmax_sge, but then re-reads the same field to calculate the memcpy\nsize. A concurrent userspace thread can modify num_sge between\nvalidation and use, causing a heap buffer overflow when copying the\nWQE into qp-\u0026gt;resp.srq_wqe.\n\nRead num_sge into a local variable and use it for both the bounds\ncheck and the size calculation.(CVE-2026-74378)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srpt: fix integer overflow in immediate data length check\n\nimm_buf-\u0026gt;len is a user-controlled uint32_t received from the network.\nAdding it to imm_data_offset without overflow checking allows a\nmalicious initiator to send len=0xFFFFFFFF, causing req_size to wrap\naround to a small value, bypassing the bounds check, and subsequently\npassing a ~4GB length to sg_init_one().\n\nUse check_add_overflow() to detect wrapping before the comparison.(CVE-2026-74394)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nIB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier\n\nmlx5_ib_alloc_transport_domain() allocates a transport domain and then\nmay fail in mlx5_ib_enable_lb(). In that case, the allocated TD is leaked.\n\nFix this by deallocating the TD when mlx5_ib_enable_lb() returns an\nerror. Also return 0 explicitly in the no-loopback-capability success\nbranch, and move dev-\u0026gt;lb.mutex initialization to mlx5_ib_stage_init_init().(CVE-2026-74397)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD\n\naddrconf_dad_failure() transitions ifp-\u0026gt;state from DAD to POSTDAD\nvia addrconf_dad_end(), which drops ifp-\u0026gt;lock on return.  The lock\nis re-acquired after net_info_ratelimited().  A concurrent\nipv6_del_addr() can take the lock in that window, set ifp-\u0026gt;state\nto DEAD and run list_del_rcu(\u0026amp;ifp-\u0026gt;if_list).\n\naddrconf_dad_failure() then overwrites DEAD with ERRDAD at errdad:\nand schedules a new dad_work.  The work calls ipv6_del_addr()\nagain, hitting the already-poisoned list entry:\n\n  general protection fault: 0000 [#1] SMP NOPTI\n  CPU: 4 PID: 217 Comm: kworker/4:1\n  Workqueue: ipv6_addrconf addrconf_dad_work\n  RIP: 0010:ipv6_del_addr+0xe9/0x280\n  RAX: dead000000000122\n  Call Trace:\n   addrconf_dad_stop+0x113/0x140\n   addrconf_dad_work+0x28c/0x430\n   process_one_work+0x1eb/0x3b0\n   worker_thread+0x4d/0x400\n   kthread+0x104/0x140\n   ret_from_fork+0x35/0x40\n\nFold the addrconf_dad_end() logic into addrconf_dad_failure() under\na single ifp-\u0026gt;lock critical section.  The STABLE_PRIVACY branch\ntemporarily drops ifp-\u0026gt;lock around address regeneration, so at\nlock_errdad: verify the state is still POSTDAD before transitioning\nto ERRDAD; bail out otherwise to avoid overwriting a state set by\nanother path while the lock was released.(CVE-2026-74398)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().\n\nudp_tunnel_sock_release() could set sk-\u0026gt;sk_user_data to NULL\nwhile vxlan_gro_prepare_receive() is running.\n\nLet\u0026apos;s check if rcu_dereference_sk_user_data() is NULL after\nskb_gro_remcsum_init().(CVE-2026-74406)","status":"published","published":"2026-09-05T15:04:07Z","modified":"2026-09-05T15:16:42.34927633Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3704","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: add VLAN id validation before using\n\nCurrently, the VLAN id may be used without validation when\nreceive a VLAN configuration mailbox from VF. The length of\nvlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause\nout-of-bounds memory access once the VLAN id is bigger than\nor equal to VLAN_N_VID.\n\nTherefore, VLAN id needs to be checked to ensure it is within\nthe range of VLAN_N_VID.(CVE-2025-71112)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\next4: fix string copying in parse_apply_sb_mount_options()\n\nstrscpy_pad() can\u0026apos;t be used to copy a non-NUL-term string into a NUL-term\nstring of possibly bigger size.  Commit 0efc5990bca5 (\u0026quot;string.h: Introduce\nmemtostr() and memtostr_pad()\u0026quot;) provides additional information in that\nregard.  So if this happens, the following warning is observed:\n\nstrnlen: detected buffer overflow: 65 byte read of buffer size 64\nWARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032\nModules linked in:\nCPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nRIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032\nCall Trace:\n \u0026lt;TASK\u0026gt;\n __fortify_panic+0x1f/0x30 lib/string_helpers.c:1039\n strnlen include/linux/fortify-string.h:235 [inline]\n sized_strscpy include/linux/fortify-string.h:309 [inline]\n parse_apply_sb_mount_options fs/ext4/super.c:2504 [inline]\n __ext4_fill_super fs/ext4/super.c:5261 [inline]\n ext4_fill_super+0x3c35/0xad00 fs/ext4/super.c:5706\n get_tree_bdev_flags+0x387/0x620 fs/super.c:1636\n vfs_get_tree+0x93/0x380 fs/super.c:1814\n do_new_mount fs/namespace.c:3553 [inline]\n path_mount+0x6ae/0x1f70 fs/namespace.c:3880\n do_mount fs/namespace.c:3893 [inline]\n __do_sys_mount fs/namespace.c:4103 [inline]\n __se_sys_mount fs/namespace.c:4080 [inline]\n __x64_sys_mount+0x280/0x300 fs/namespace.c:4080\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x64/0x140 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nSince userspace is expected to provide s_mount_opts field to be at most 63\ncharacters long with the ending byte being NUL-term, use a 64-byte buffer\nwhich matches the size of s_mount_opts, so that strscpy_pad() does its job\nproperly.  Return with error if the user still managed to provide a\nnon-NUL-term string here.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.(CVE-2025-71123)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/umad: Reject negative data_len in ib_umad_write\n\nib_umad_write computes data_len from user-controlled count and the\nMAD header sizes. With a mismatched user MAD header size and RMPP\nheader length, data_len can become negative and reach ib_create_send_mad().\nThis can make the padding calculation exceed the segment size and trigger\nan out-of-bounds memset in alloc_send_rmpp_list().\n\nAdd an explicit check to reject negative data_len before creating the\nsend buffer.\n\nKASAN splat:\n[  211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0\n[  211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102\n[  211.365867] ib_create_send_mad+0xa01/0x11b0\n[  211.365887] ib_umad_write+0x853/0x1c80(CVE-2026-23243)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme: fix memory allocation in nvme_pr_read_keys()\n\nnvme_pr_read_keys() takes num_keys from userspace and uses it to\ncalculate the allocation size for rse via struct_size(). The upper\nlimit is PR_KEYS_MAX (64K).\n\nA malicious or buggy userspace can pass a large num_keys value that\nresults in a 4MB allocation attempt at most, causing a warning in\nthe page allocator when the order exceeds MAX_PAGE_ORDER.\n\nTo fix this, use kvzalloc() instead of kzalloc().\n\nThis bug has the same reasoning and fix with the patch below:\nhttps://lore.kernel.org/linux-block/(CVE-2026-23244)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-core: fix wrong reinitialization of ringbuffer on reopen\n\ndvb_dvr_open() calls dvb_ringbuffer_init() when a new reader opens the\nDVR device.  dvb_ringbuffer_init() calls init_waitqueue_head(), which\nreinitializes the waitqueue list head to empty.\n\nSince dmxdev-\u0026gt;dvr_buffer.queue is a shared waitqueue (all opens of the\nsame DVR device share it), this orphans any existing waitqueue entries\nfrom io_uring poll or epoll, leaving them with stale prev/next pointers\nwhile the list head is reset to {self, self}.\n\nThe waitqueue and spinlock in dvr_buffer are already properly\ninitialized once in dvb_dmxdev_init().  The open path only needs to\nreset the buffer data pointer, size, and read/write positions.\n\nReplace the dvb_ringbuffer_init() call in dvb_dvr_open() with direct\nassignment of data/size and a call to dvb_ringbuffer_reset(), which\nproperly resets pread, pwrite, and error with correct memory ordering\nwithout touching the waitqueue or spinlock.(CVE-2026-23253)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\napparmor: fix unprivileged local user can do privileged policy management\n\nAn unprivileged local user can load, replace, and remove profiles by\nopening the apparmorfs interfaces, via a confused deputy attack, by\npassing the opened fd to a privileged process, and getting the\nprivileged process to write to the interface.\n\nThis does require a privileged target that can be manipulated to do\nthe write for the unprivileged process, but once such access is\nachieved full policy management is possible and all the possible\nimplications that implies: removing confinement, DoS of system or\ntarget applications by denying all execution, by-passing the\nunprivileged user namespace restriction, to exploiting kernel bugs for\na local privilege escalation.\n\nThe policy management interface can not have its permissions simply\nchanged from 0666 to 0600 because non-root processes need to be able\nto load policy to different policy namespaces.\n\nInstead ensure the task writing the interface has privileges that\nare a subset of the task that opened the interface. This is already\ndone via policy for confined processes, but unconfined can delegate\naccess to the opened fd, by-passing the usual policy check.(CVE-2026-23268)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nperf: Fix __perf_event_overflow() vs perf_remove_from_context() race\n\nMake sure that __perf_event_overflow() runs with IRQs disabled for all\npossible callchains. Specifically the software events can end up running\nit with only preemption disabled.\n\nThis opens up a race vs perf_event_exit_event() and friends that will go\nand free various things the overflow path expects to be present, like\nthe BPF program.(CVE-2026-23271)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Return the correct value in vmw_translate_ptr functions\n\nBefore the referenced fixes these functions used a lookup function that\nreturned a pointer. This was changed to another lookup function that\nreturned an error code with the pointer becoming an out parameter.\n\nThe error path when the lookup failed was not changed to reflect this\nchange and the code continued to return the PTR_ERR of the now\nuninitialized pointer. This could cause the vmw_translate_ptr functions\nto return success when they actually failed causing further uninitialized\nand OOB accesses.(CVE-2026-23317)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim\n\nThe root cause of this bug is that when \u0026apos;bpf_link_put\u0026apos; reduces the\nrefcount of \u0026apos;shim_link-\u0026gt;link.link\u0026apos; to zero, the resource is considered\nreleased but may still be referenced via \u0026apos;tr-\u0026gt;progs_hlist\u0026apos; in\n\u0026apos;cgroup_shim_find\u0026apos;. The actual cleanup of \u0026apos;tr-\u0026gt;progs_hlist\u0026apos; in\n\u0026apos;bpf_shim_tramp_link_release\u0026apos; is deferred. During this window, another\nprocess can cause a use-after-free via \u0026apos;bpf_trampoline_link_cgroup_shim\u0026apos;.\n\nBased on Martin KaFai Lau\u0026apos;s suggestions, I have created a simple patch.\n\nTo fix this:\n   Add an atomic non-zero check in \u0026apos;bpf_trampoline_link_cgroup_shim\u0026apos;.\n   Only increment the refcount if it is not already zero.\n\nTesting:\n   I verified the fix by adding a delay in\n   \u0026apos;bpf_shim_tramp_link_release\u0026apos; to make the bug easier to trigger:\n\nstatic void bpf_shim_tramp_link_release(struct bpf_link *link)\n{\n\t/* ... */\n\tif (!shim_link-\u0026gt;trampoline)\n\t\treturn;\n\n+\tmsleep(100);\n\tWARN_ON_ONCE(bpf_trampoline_unlink_prog(\u0026amp;shim_link-\u0026gt;link,\n\t\tshim_link-\u0026gt;trampoline, NULL));\n\tbpf_trampoline_put(shim_link-\u0026gt;trampoline);\n}\n\nBefore the patch, running a PoC easily reproduced the crash(almost 100%)\nwith a call trace similar to KaiyanM\u0026apos;s report.\nAfter the patch, the bug no longer occurs even after millions of\niterations.(CVE-2026-23319)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix stack-out-of-bounds write in devmap\n\nget_upper_ifindexes() iterates over all upper devices and writes their\nindices into an array without checking bounds.\n\nAlso the callers assume that the max number of upper devices is\nMAX_NEST_DEV and allocate excluded_devices[1+MAX_NEST_DEV] on the stack,\nbut that assumption is not correct and the number of upper devices could\nbe larger than MAX_NEST_DEV (e.g., many macvlans), causing a\nstack-out-of-bounds write.\n\nAdd a max parameter to get_upper_ifindexes() to avoid the issue.\nWhen there are too many upper devices, return -EOVERFLOW and abort the\nredirect.\n\nTo reproduce, create more than MAX_NEST_DEV(8) macvlans on a device with\nan XDP program attached using BPF_F_BROADCAST | BPF_F_EXCLUDE_INGRESS.\nThen send a packet to the device to trigger the XDP redirect path.(CVE-2026-23359)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing\n\nstruct bpf_plt contains a u64 target field. Currently, the BPF JIT\nallocator requests an alignment of 4 bytes (sizeof(u32)) for the JIT\nbuffer.\n\nBecause the base address of the JIT buffer can be 4-byte aligned (e.g.,\nending in 0x4 or 0xc), the relative padding logic in build_plt() fails\nto ensure that target lands on an 8-byte boundary.\n\nThis leads to two issues:\n1. UBSAN reports misaligned-access warnings when dereferencing the\n   structure.\n2. More critically, target is updated concurrently via WRITE_ONCE() in\n   bpf_arch_text_poke() while the JIT\u0026apos;d code executes ldr. On arm64,\n   64-bit loads/stores are only guaranteed to be single-copy atomic if\n   they are 64-bit aligned. A misaligned target risks a torn read,\n   causing the JIT to jump to a corrupted address.\n\nFix this by increasing the allocation alignment requirement to 8 bytes\n(sizeof(u64)) in bpf_jit_binary_pack_alloc(). This anchors the base of\nthe JIT buffer to an 8-byte boundary, allowing the relative padding math\nin build_plt() to correctly align the target field.(CVE-2026-23383)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nSquashfs: check metadata block offset is within range\n\nSyzkaller reports a \u0026quot;general protection fault in squashfs_copy_data\u0026quot;\n\nThis is ultimately caused by a corrupted index look-up table, which\nproduces a negative metadata block offset.\n\nThis is subsequently passed to squashfs_copy_data (via\nsquashfs_read_metadata) where the negative offset causes an out of bounds\naccess.\n\nThe fix is to check that the offset is within range in\nsquashfs_read_metadata.  This will trap this and other cases.(CVE-2026-23388)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl\n\nWhen page reassignment was added to af_alg_pull_tsgl the original\nloop wasn\u0026apos;t updated so it may try to reassign one more page than\nnecessary.\n\nAdd the check to the reassignment so that this does not happen.\n\nAlso update the comment which still refers to the obsolete offset\nargument.(CVE-2026-43078)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - snapshot IV for async AEAD requests\n\nAF_ALG AEAD AIO requests currently use the socket-wide IV buffer during\nrequest processing.  For async requests, later socket activity can\nupdate that shared state before the original request has fully\ncompleted, which can lead to inconsistent IV handling.\n\nSnapshot the IV into per-request storage when preparing the AEAD\nrequest, so in-flight operations no longer depend on mutable socket\nstate.(CVE-2026-46028)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsched/fair: Clear rel_deadline when initializing forked entities\n\nA yield-triggered crash can happen when a newly forked sched_entity\nenters the fair class with se-\u0026gt;rel_deadline unexpectedly set.\n\nThe failing sequence is:\n\n  1. A task is forked while se-\u0026gt;rel_deadline is still set.\n  2. __sched_fork() initializes vruntime, vlag and other sched_entity\n     state, but does not clear rel_deadline.\n  3. On the first enqueue, enqueue_entity() calls place_entity().\n  4. Because se-\u0026gt;rel_deadline is set, place_entity() treats se-\u0026gt;deadline\n     as a relative deadline and converts it to an absolute deadline by\n     adding the current vruntime.\n  5. However, the forked entity\u0026apos;s deadline is not a valid inherited\n     relative deadline for this new scheduling instance, so the conversion\n     produces an abnormally large deadline.\n  6. If the task later calls sched_yield(), yield_task_fair() advances\n     se-\u0026gt;vruntime to se-\u0026gt;deadline.\n  7. The inflated vruntime is then used by the following enqueue path,\n     where the vruntime-derived key can overflow when multiplied by the\n     entity weight.\n  8. This corrupts cfs_rq-\u0026gt;sum_w_vruntime, breaks EEVDF eligibility\n     calculation, and can eventually make all entities appear ineligible.\n     pick_next_entity() may then return NULL unexpectedly, leading to a\n     later NULL dereference.\n\nA captured trace shows the effect clearly. Before yield, the entity\u0026apos;s\nvruntime was around:\n\n  9834017729983308\n\nAfter yield_task_fair() executed:\n\n  se-\u0026gt;vruntime = se-\u0026gt;deadline\n\nthe vruntime jumped to:\n\n  19668035460670230\n\nand the deadline was later advanced further to:\n\n  19668035463470230\n\nThis shows that the deadline had already become abnormally large before\nyield_task_fair() copied it into vruntime.\n\nrel_deadline is only meaningful when se-\u0026gt;deadline really carries a\nrelative deadline that still needs to be placed against vruntime. A\nfreshly forked sched_entity should not inherit or retain this state.\nClear se-\u0026gt;rel_deadline in __sched_fork(), together with the other\nsched_entity runtime state, so that the first enqueue does not interpret\nthe new entity\u0026apos;s deadline as a stale relative deadline.(CVE-2026-52980)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/sec2 - prevent req used-after-free for sec\n\nDuring packet transmission, if the system is under heavy load,\nthe hardware might complete processing the packet and free the\nrequest memory (req) before the transmission function finishes.\nIf the software subsequently accesses this req, a use-after-free\nerror will occur. The qp_ctx memory exists throughout the packet\nsending process, so replace the req with the qp_ctx.(CVE-2026-53055)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing\n\nWhen a listening SCTP server processes a COOKIE_ECHO chunk, the cached\npeer INIT chunk embedded after the cookie is parsed and its parameters\nare later walked by sctp_process_init() using sctp_walk_params().\n\nHowever, the chunk header length of this cached INIT chunk was not\nvalidated against the remaining buffer in the COOKIE_ECHO payload. If\nthe length field is inflated, the parameter walk can run beyond the\nactual received data, leading to out-of-bounds reads and potential\nmemory corruption during later parameter handling (e.g. STATE_COOKIE\nprocessing and kmemdup() copies).\n\nAdd a bounds check in sctp_unpack_cookie() to ensure the cached INIT\nchunk length does not exceed the available data in the COOKIE_ECHO\nbuffer before it is used.(CVE-2026-53246)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_dw: unregister 8250 port if clk_notifier_register() fails\n\ndw8250_probe() registers the 8250 port via serial8250_register_8250_port()\nand then, if the device has a clock, registers a clock notifier. If\nclk_notifier_register() fails, probe returns the error but leaves the\n8250 port registered. The matching serial8250_unregister_port() lives\nin dw8250_remove(), which is not called when probe fails, so the port\nslot stays occupied until the device is rebound or the system is\nrebooted. The devm-allocated driver data is freed while the port still\nreferences it (via the saved private_data and serial_in/serial_out\ncallbacks), so any access to that port slot before a rebind is a\nuse-after-free hazard.\n\nUnregister the port on the clk_notifier_register() error path.(CVE-2026-53384)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npNFS: Fix use-after-free in pnfs_update_layout()\n\nWhen hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layout(),\nthe code calls pnfs_prepare_to_retry_layoutget(lo). If it succeeds,\npnfs_put_layout_hdr(lo) is called before trace_pnfs_update_layout(),\nwhich still references \u0026apos;lo\u0026apos;. This results in a use-after-free when the\ntracepoint accesses lo\u0026apos;s fields.\n\nFix this by moving the tracepoint call before pnfs_put_layout_hdr(lo).(CVE-2026-63800)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: skmsg: preserve sg.copy across SG transforms\n\nThe sk_msg sg.copy bitmap is part of the scatterlist entry ownership\nstate. A set bit tells sk_msg_compute_data_pointers() not to expose the\nentry through writable BPF ctx-\u0026gt;data. This protects entries backed by\npages that are not private to the sk_msg, such as splice-backed file\npage-cache pages.\n\nSeveral sk_msg transform paths move, copy, split, or compact\nmsg-\u0026gt;sg.data[] entries without moving the matching sg.copy bit. This can\nmake an externally backed entry arrive at a new slot with a clear copy\nbit. A later SK_MSG verdict can then expose sg_virt(sge) as writable\nctx-\u0026gt;data and BPF stores can modify the original page cache.\n\nKeep sg.copy synchronized with sg.data[] whenever entries are\ntransferred, shifted, split, or copied into a new sk_msg. Clear the bit\nwhen an entry is replaced by a newly allocated private page or freed.\nThis covers the BPF pull/push/pop helpers, sk_msg_shift_left/right(),\nsk_msg_xfer(), and tls_split_open_record(), including the partial tail\nentry created during TLS open-record splitting.(CVE-2026-63830)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Validate CHAP_R length before base64 decode\n\nchap_server_compute_hash() allocates client_digest as\nkzalloc(chap-\u0026gt;digest_size) and then, for BASE64-encoded responses,\npasses chap_r directly to chap_base64_decode() without checking whether\nthe input length could produce more than digest_size bytes of output.\n\nchap_base64_decode() writes to the destination unconditionally as long\nas there is input to consume. With MAX_RESPONSE_LENGTH set to 128 and\nthe \u0026quot;0b\u0026quot; prefix stripped by extract_param(), up to 127 base64 characters\ncan reach the decoder. 127 characters decode to 95 bytes. For SHA-256\n(digest_size=32) this overflows client_digest by 63 bytes; for MD5\n(digest_size=16) the overflow is 79 bytes.\n\nThe length check at line 344 fires after the write has already happened.\n\nThe HEX branch in the same switch statement already validates the length\nup front. Apply the same approach to the BASE64 branch: strip trailing\nbase64 padding characters, then reject any input whose data length\nexceeds DIV_ROUND_UP(digest_size * 4, 3) before calling the decoder.\n\nStripping trailing \u0026apos;=\u0026apos; before the comparison handles both padded and\nunpadded encodings. chap_base64_decode() already returns early on \u0026apos;=\u0026apos;,\nso the full original string is still passed to the decoder unchanged.\n\nThe mutual CHAP path decodes CHAP_C into initiatorchg_binhex, which is\nkzalloc(CHAP_CHALLENGE_STR_LEN). extract_param() caps initiatorchg at\nCHAP_CHALLENGE_STR_LEN characters, so at most CHAP_CHALLENGE_STR_LEN-1\nbase64 characters reach the decoder. The maximum decoded size,\nDIV_ROUND_UP((CHAP_CHALLENGE_STR_LEN-1) * 3, 4), is less than\nCHAP_CHALLENGE_STR_LEN, so no overflow is possible there. A comment is\nadded at the call site to document this.(CVE-2026-63886)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf\n\niscsi_encode_text_output() concatenates \u0026quot;key=value\\0\u0026quot; records into\nlogin-\u0026gt;rsp_buf, an 8192-byte kzalloc(MAX_KEY_VALUE_PAIRS) buffer\nallocated in iscsit_alloc_login_setup_buffer(). The three sprintf() call\nsites in this function (lines 1398, 1411, 1424 in v7.1-rc2) never check\nthe remaining buffer capacity:\n\n\t*length += sprintf(output_buf, \u0026quot;%s=%s\u0026quot;, er-\u0026gt;key, er-\u0026gt;value);\n\t*length += 1;\n\toutput_buf = textbuf + *length;\n\nThe 8192-byte ceiling at iscsi_target_check_login_request() bounds the\n*input* Login PDU payload, but a single PDU can carry up to 2048 minimal\nfour-byte \u0026quot;a=b\\0\u0026quot; pairs, each unknown key expanding to a 16-byte\n\u0026quot;a=NotUnderstood\\0\u0026quot; output record via iscsi_add_notunderstood_response().\n2048 * 16 = 32 KiB of output into an 8 KiB buffer, producing a ~24 KiB\nheap overrun in the kmalloc-8k slab.\n\nThe fix introduces a static iscsi_encode_text_record() helper that uses\nsnprintf() with a per-call bounds check against the remaining buffer,\nand threads a u32 textbuf_size parameter through\niscsi_encode_text_output(). Both call sites in\niscsi_target_handle_csg_zero() (PHASE_SECURITY) and\niscsi_target_handle_csg_one() (PHASE_OPERATIONAL) pass\nMAX_KEY_VALUE_PAIRS. On overflow the encoder logs the condition, calls\niscsi_release_extra_responses() to drop queued records, and returns -1;\nboth caller sites now emit ISCSI_STATUS_CLS_INITIATOR_ERR /\nISCSI_LOGIN_STATUS_INIT_ERR via iscsit_tx_login_rsp() before returning,\nso the initiator sees an explicit failed-login response rather than a\nsilent connection drop. (Prior to this patch only the PHASE_OPERATIONAL\ncaller did that; the PHASE_SECURITY caller is converted to the same\nshape.)(CVE-2026-63887)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()\n\nTwo latent bugs in the Text-phase handler, both present since the\noriginal LIO integration in commit e48354ce078c (\u0026quot;iscsi-target: Add\niSCSI fabric support for target v4.1\u0026quot;):\n\n1) DataDigest CRC buffer overread (4 bytes past text_in).\n\n   text_in is kzalloc()\u0026apos;d at ALIGN(payload_length, 4).  rx_size is then\n   incremented by ISCSI_CRC_LEN to make room for the received DataDigest\n   in the iovec, but the same (now-bumped) rx_size is passed as the\n   buffer length to iscsit_crc_buf():\n\n       if (conn-\u0026gt;conn_ops-\u0026gt;DataDigest) {\n               ...\n               rx_size += ISCSI_CRC_LEN;\n       }\n       ...\n       if (conn-\u0026gt;conn_ops-\u0026gt;DataDigest) {\n               data_crc = iscsit_crc_buf(text_in, rx_size, 0, NULL);\n\n   iscsit_crc_buf() walks rx_size bytes of text_in with crc32c(), so\n   when DataDigest is negotiated it reads 4 bytes past the end of the\n   text_in allocation.  KASAN reproduces this directly on the unpatched\n   mainline tree as slab-out-of-bounds in crc32c() called from the Text\n   PDU path.  The OOB bytes feed crc32c() and are then compared against\n   the initiator-supplied checksum, so the value does not flow back to\n   the attacker, but the kernel does read past the buffer on every Text\n   PDU with DataDigest=CRC32C.\n\n   Fix by passing the actual padded payload length\n   (ALIGN(payload_length, 4)) that was used for the kzalloc().\n\n2) Stale cmd-\u0026gt;text_in_ptr re-free (double-free) on ERL\u0026gt;0 bad DataDigest\n   drop.\n\n   On DataDigest mismatch with ErrorRecoveryLevel \u0026gt; 0 the handler\n   silently drops the PDU and lets the initiator plug the CmdSN gap:\n\n               kfree(text_in);\n               return 0;\n\n   cmd-\u0026gt;text_in_ptr still points at the freed buffer.  The next Text\n   Request on the same ITT re-enters iscsit_setup_text_cmd(), which\n   unconditionally does\n\n       kfree(cmd-\u0026gt;text_in_ptr);\n       cmd-\u0026gt;text_in_ptr = NULL;\n\n   freeing the same pointer a second time.  Session teardown via\n   iscsit_release_cmd() has the same shape and hits the same double-free\n   if the connection is dropped before a second Text Request arrives.\n\n   On an unmodified mainline tree the bug-1 CRC overread fires first on\n   the initial valid Text Request and perturbs the subsequent state, so\n   #4 was isolated by building a kernel with only the bug-1 hunk of this\n   patch applied plus temporary printk() observability around the three\n   relevant kfree() sites.  The observability prints are not part of\n   this patch.  On that build, a three-PDU Text Request sequence after\n   login produces two back-to-back splats:\n\n       BUG: KASAN: double-free in iscsit_setup_text_cmd+0x??\n       BUG: KASAN: double-free in iscsit_release_cmd+0x??\n\n   showing the same pointer freed in the ERL\u0026gt;0 drop path and again in\n   iscsit_setup_text_cmd() (next Text Request on the same ITT) and once\n   more in iscsit_release_cmd() (session teardown).  On distro kernels\n   with CONFIG_SLAB_FREELIST_HARDENED=y (default) the double-free\n   becomes a remote kernel BUG(); on non-hardened kernels it corrupts\n   the slab freelist.\n\n   Fix by clearing cmd-\u0026gt;text_in_ptr after the kfree() in the ERL\u0026gt;0 drop\n   path.  With both hunks applied #4 is directly observable on the stock\n   tree without observability printks; fixing bug-1 alone would mask #4\n   less, not more, so the hunks are submitted together.\n\nBoth fixes are one-liners.  The Text PDU state machine is unchanged and\nthe wire protocol is unaffected.(CVE-2026-63888)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: scsi_transport_fc: Widen FPIN pname walker counter to u32\n\nAn adjacent Fibre Channel fabric actor that can deliver an FPIN ELS\nframe to an lpfc or qla2xxx Linux initiator can trigger a non-return in\nthe generic FC transport. This is not a local userspace or IP network\npath; the attacker must be able to inject fabric traffic, for example as\na compromised switch or fabric controller, or as a same-zone N_Port on a\nfabric that permits source spoofing.\n\nThe Link-Integrity and Peer-Congestion FPIN walkers used a u8 loop\ncounter against the 32-bit on-wire pname_count field, and did not bound\npname_count by the descriptor body already validated by the TLV walker.\nA pname_count of 256 therefore wraps the counter and keeps the loop\ncondition true indefinitely.\n\nFactor the shared pname_list[] walk into one helper, widen the counter\nto u32, and clamp pname_count against the entries that fit in the\ndescriptor body before iterating.(CVE-2026-63889)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: property: Cap recursion depth in __tb_property_parse_dir()\n\nA DIRECTORY entry\u0026apos;s value field is used as the dir_offset for a\nrecursive call into __tb_property_parse_dir() with no depth counter.\nA crafted peer that chains DIRECTORY entries into a back-reference\nloop drives the parser until the kernel stack is exhausted and the\nguard page fires.  Any untrusted XDomain peer (cable, dock, in-line\ninspector, adjacent host) that reaches the PROPERTIES_REQUEST\ncontrol-plane exchange can trigger this without authentication.\n\nThread a depth counter through tb_property_parse() and\n__tb_property_parse_dir(), and reject blocks that exceed\nTB_PROPERTY_MAX_DEPTH = 8.  That is comfortably larger than any\nobserved legitimate XDomain layout.\n\nOperators who do not need XDomain host-to-host discovery can disable\nthe path entirely with thunderbolt.xdomain=0 on the kernel command\nline.(CVE-2026-63891)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mct_u232: fix memory corruption with small endpoint\n\nThe driver overrides the maximum transfer size for a specific device\nwhich only accepts 16 byte packets for its 32 byte bulk-out endpoint.\n\nMake sure to never increase the maximum transfer size to prevent slab\ncorruption should a malicious device report a smaller endpoint max\npacket size than expected.(CVE-2026-63898)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mxuport: fix memory corruption with small endpoint\n\nMake sure that the bulk-out endpoint max packet size is at least eight\nbytes to avoid user-controlled slab corruption should a malicious device\nreport a smaller size.(CVE-2026-63899)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: digi_acceleport: fix memory corruption with small endpoints\n\nAdd the missing bulk-out buffer size sanity checks to avoid\nout-of-bounds memory accesses or slab corruption should a malicious\ndevice report smaller buffers than expected.(CVE-2026-63901)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: esp: restore combined single-frag length gate\n\nThe ESP out-of-place fast path appends the trailer in esp_output_head()\nbefore esp_output_tail() allocates the destination page frag. The\nhead-side gate currently checks skb-\u0026gt;data_len and tailen separately, but\nthe tail code allocates a single destination frag from the combined\npost-trailer skb-\u0026gt;data_len.\n\nReject the page-frag fast path when the combined aligned length exceeds a\npage. Otherwise skb_page_frag_refill() may fall back to a single page while\nthe destination sg still spans the combined skb-\u0026gt;data_len.\n\nRestore this combined-length page gate for both IPv4 and IPv6.(CVE-2026-63912)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nip6: vti: Use ip6_tnl.net in vti6_changelink().\n\nip netns add ns1\nip netns add ns2\nip -n ns1 link add vti6_test type vti6 remote ::1 local ::2 key 7\nip -n ns1 link set vti6_test netns ns2\nip -n ns2 link set vti6_test type vti6 remote ::3 local ::4 key 9\nip netns del ns2\nip netns del ns1\n[  132.495484] ------------[ cut here ]------------\n[  132.497609] kernel BUG at net/core/dev.c:12376!\n\nCommit 61220ab34948 (\u0026quot;vti6: Enable namespace changing\u0026quot;) dropped\nNETIF_F_NETNS_LOCAL from vti6 devices. A vti6 tunnel can then\nmove through IFLA_NET_NS_FD. After the move dev_net(dev) points\nat the new netns while t-\u0026gt;net stays at the creation netns.\n\nvti6_changelink() and vti6_update() still use dev_net(dev) and\ndev_net(t-\u0026gt;dev). They unlink from one per netns hash and relink\ninto another. The creation netns is left with a stale entry.\ncleanup_net() of that netns later walks freed memory.\n\nReachable from an unprivileged user namespace (unshare --user\n--map-root-user --net). Cross tenant scope on container hosts.(CVE-2026-63917)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: input: hold netns during deferred transport reinjection\n\nTransport-mode reinjection stores a struct net pointer in skb-\u0026gt;cb and\nuses it later from xfrm_trans_reinject(). That pointer must stay valid\nuntil the deferred callback runs.\n\nTake a netns reference when queueing deferred reinjection work and drop\nit after the callback completes. Use maybe_get_net() so the queueing\npath does not revive a namespace that is already being torn down.\n\nThis keeps the existing workqueue design and fixes the netns lifetime\nhandling in one place for all users of xfrm_trans_queue_net().(CVE-2026-63919)\n\nIn the Linux kernel, ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) \u0026amp;lt;\u0026amp;lt; 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read.(CVE-2026-63920)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().\n\nAfter patch 1/2 in this series, vti6_update() unlinks and relinks\nthe tunnel through t-\u0026gt;net. vti6_siocdevprivate() still uses\ndev_net(dev) for the collision lookup. For a tunnel moved through\nIFLA_NET_NS_FD, dev_net(dev) is the new netns, not t-\u0026gt;net.\n\nSIOCCHGTUNNEL on a migrated tunnel then runs:\n\n  net = dev_net(dev)                    /* migrated netns */\n  t   = vti6_locate(net, \u0026amp;p1, false)    /* misses target in t-\u0026gt;net */\n  ...\n  t   = netdev_priv(dev)\n  vti6_update(t, \u0026amp;p1, false)            /* mutates t-\u0026gt;net\u0026apos;s hash */\n\nA caller in the migrated netns picks params that match a tunnel\nin the creation netns. The lookup in dev_net(dev) finds nothing.\nvti6_update() prepends the migrated tunnel at the head of the\ncreation netns hash bucket for those params. Later lookups in\nthe creation netns resolve to the migrated device. xfrm receive\ndelivers the matched packets through a device the caller controls.\n\nReachable from an unprivileged user namespace (unshare --user\n--map-root-user --net). Cross tenant scope on container hosts.\n\nSwitch the SIOCCHGTUNNEL path on a non fallback device to use\nt-\u0026gt;net for the lookup. The lookup now matches the netns\nvti6_update() operates on.\n\nAlso add ns_capable(self-\u0026gt;net-\u0026gt;user_ns, CAP_NET_ADMIN) before\nthe lookup. The check at the top of the case is against\ndev_net(dev)-\u0026gt;user_ns, which after migration is the attacker\u0026apos;s\nnetns. A caller there can pick params absent from self-\u0026gt;net,\nthe lookup returns NULL, t becomes self, and vti6_update()\ninserts the device into the creation netns hash. The new check\nrequires CAP_NET_ADMIN in the creation netns user_ns too.\n\nSIOCADDTUNNEL and SIOCCHGTUNNEL on the fallback device keep\ndev_net(dev), which equals init_net there.(CVE-2026-63921)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()\n\nipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.\nLet\u0026apos;s recompute nh pointer to make sure any change won\u0026apos;t mess things up.(CVE-2026-63924)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: sockmap: fix tail fragment offset in bpf_msg_push_data\n\nWhen bpf_msg_push_data() inserts data in the middle of a scatterlist\nentry, it splits the original entry into a left fragment and a right\nfragment.\n\nThe right fragment offset is page-local, but the code advances it with\n`start`, which is the message-global insertion point. For inserts into a\nnon-first SG entry, this over-advances the offset and leaves the split\nlayout inconsistent.\n\nAdvance the right fragment offset by the fragment-local delta,\n`start - offset`, which matches the length removed from the front of the\noriginal entry.(CVE-2026-63926)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: omninet: fix memory corruption with small endpoint\n\nMake sure that the bulk-out buffers are at least as large as the\nhardcoded transfer size to avoid user-controlled slab corruption should\na malicious device report a smaller endpoint max packet size than\nexpected.(CVE-2026-63928)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: fix UAF in hci_le_create_cis_sync\n\nhci_le_create_cis_sync() dereferences conn-\u0026gt;conn_timeout after releasing\nboth rcu_read_lock() and hci_dev_lock(hdev).  The conn pointer was\nobtained from an RCU-protected iteration over hdev-\u0026gt;conn_hash.list and\nis not valid once these locks are dropped.  A concurrent disconnect can\nfree the hci_conn between the unlock and the dereference, causing a\nuse-after-free read.\n\nThe cancellation mechanism in hci_conn_del() cannot prevent this because\nhci_le_create_cis_pending() queues hci_create_cis_sync with data=NULL:\n\n    hci_cmd_sync_queue(hdev, hci_create_cis_sync, NULL, NULL);\n\nWhile hci_conn_del() dequeues with data=conn:\n\n    hci_cmd_sync_dequeue(hdev, NULL, conn, NULL);\n\nSince NULL != conn, the lookup in _hci_cmd_sync_lookup_entry() never\nmatches, and the pending work item is not cancelled.\n\nFix this by saving conn-\u0026gt;conn_timeout into a local variable while the\nlocks are still held, so the stale conn pointer is never dereferenced\nafter unlock.\n\nThis is the same class of bug as the one fixed by commit 035c25007c9e\n(\u0026quot;Bluetooth: hci_sync: Fix UAF on le_read_features_complete\u0026quot;) which\naddressed the identical pattern in a different function.\n\nThis vulnerability was identified using 0sec.ai, an open-source\nautomated security auditing platform (https://github.com/0sec-labs).(CVE-2026-63944)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: serialize iso_sock_clear_timer with socket lock\n\niso_sock_close() calls iso_sock_clear_timer() before acquiring\nlock_sock(sk).\n\niso_sock_clear_timer() reads iso_pi(sk)-\u0026gt;conn twice without the\nsocket lock held:\n\n    if (!iso_pi(sk)-\u0026gt;conn)\n        return;\n    cancel_delayed_work(\u0026amp;iso_pi(sk)-\u0026gt;conn-\u0026gt;timeout_work);\n\nConcurrently, iso_conn_del() executes under lock_sock(sk) and calls\niso_chan_del(), which sets iso_pi(sk)-\u0026gt;conn to NULL and may result in\nthe final reference to the connection being dropped:\n\n    CPU0                         CPU1\n    ----                         ----\n    iso_sock_clear_timer()\n      if (conn != NULL) ...      lock_sock(sk)\n                                   iso_chan_del()\n                                   iso_pi(sk)-\u0026gt;conn = NULL\n      cancel_delayed_work(conn)  /* NULL deref or UAF */\n\niso_pi(sk)-\u0026gt;conn is not stable across the unlock window, causing a\nNULL pointer dereference or use-after-free.\n\nSerialize iso_sock_clear_timer() with the socket lock by moving it\ninside lock_sock()/release_sock(), matching the pattern used in\niso_conn_del() and all other call sites.(CVE-2026-63945)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: fix UAF in iso_recv_frame\n\niso_recv_frame reads conn-\u0026gt;sk under iso_conn_lock but releases the lock\nbefore using sk, with no reference held. A concurrent iso_sock_kill()\ncan free sk in that window, causing use-after-free on sk-\u0026gt;sk_state and\nsock_queue_rcv_skb().\n\nFix by replacing the bare pointer read with iso_sock_hold(conn), which\ncalls sock_hold() while the spinlock is held, atomically elevating the\nrefcount before the lock drops. Add a drop_put label so sock_put() is\ncalled on all exit paths where the hold succeeded.(CVE-2026-63946)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmemfd: deny writeable mappings when implying SEAL_WRITE\n\nWhen SEAL_EXEC is added, SEAL_WRITE is implied to make W^X.  But the\nimplied seal is set after the check that makes sure the memfd can not have\nany writable mappings.  This means one can use SEAL_EXEC to apply\nSEAL_WRITE while having writeable mappings.\n\nThis breaks the contract that SEAL_WRITE provides and can be used by an\nattacker to pass a memfd that appears to be write sealed but can still be\nmodified arbitrarily.\n\nFix this by adding the implied seals before the call for\nmapping_deny_writable() is done.(CVE-2026-63952)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: cypress_m8: fix memory corruption with small endpoint\n\nMake sure that the interrupt-out endpoint max packet size is at least\neight bytes to avoid user-controlled slab corruption or NULL-pointer\ndereference should a malicious device report a smaller size.(CVE-2026-63956)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix possible infinite loop in fib6_select_path()\n\nFound while auditing the same pattern Sashiko reported in\nrt6_fill_node() [1]. Apply the same fix as\ncommit f8d8ce1b515a (\u0026quot;ipv6: fix possible infinite loop in fib6_info_uses_dev()\u0026quot;).\n\nWriters holding tb6_lock can list_del_rcu(\u0026amp;first-\u0026gt;fib6_siblings)\nwithout waiting for RCU readers; first-\u0026gt;fib6_siblings.next then\nstill points into the old ring and this softirq-side walker never\nreaches \u0026amp;first-\u0026gt;fib6_siblings as its terminator. fib6_purge_rt()\nalways WRITE_ONCE()s first-\u0026gt;fib6_nsiblings to 0 before\nlist_del_rcu(), so an inside-loop check is a reliable detach signal.\n\n[1] https://sashiko.dev/#/patchset/20260526020227.4857-1-jiayuan.chen%40linux.dev(CVE-2026-63968)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix race between sctp_wait_for_connect and peeloff\n\nsctp_wait_for_connect() drops and re-acquires the socket lock while\nwaiting for the association to reach ESTABLISHED state. During this\nwindow, another thread can peeloff the association to a new socket via\ngetsockopt(SCTP_SOCKOPT_PEELOFF), changing asoc-\u0026gt;base.sk. After\nre-acquiring the old socket lock, sctp_wait_for_connect() returns\nsuccess without noticing the migration — the caller then accesses\nthe association under the wrong lock in sctp_datamsg_from_user().\n\nAdd the same sk != asoc-\u0026gt;base.sk check that sctp_wait_for_sndbuf()\nalready has, returning an error if the association was migrated while\nwe slept.(CVE-2026-63971)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close\n\nSince hci_dev_close_sync() can now be called during the reset path, we\nshould also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts\nwhile the hdev workqueue is being drained.(CVE-2026-63974)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp\n\nIf dcid is received for an already-assigned destination CID the spec\nrequires that both channels to be discarded, but calling l2cap_chan_del\nmay invalidate the tmp cursor created by list_for_each_entry_safe and\nin fact it is the wrong procedure as the chan-\u0026gt;dcid may be assigned\npreviously it really needs to be disconnected.\n\nCalling l2cap_chan_clone directly may still lead to l2cap_chan_del so\ninstead schedule l2cap_chan_timeout with delay 0 to close the channel\nasynchronously.(CVE-2026-63975)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: l2cap: clear chan-\u0026gt;ident on ECRED reconfiguration success\n\nl2cap_ecred_reconf_rsp() returns early on success without clearing\nchan-\u0026gt;ident. Every other L2CAP response handler (l2cap_ecred_conn_rsp,\nl2cap_le_connect_rsp, l2cap_config_rsp) clears chan-\u0026gt;ident after a\nsuccessful transaction to prevent the channel from matching subsequent\nresponses with the recycled ident value.\n\nA remote attacker that completed a reconfiguration as the peer can\nreplay a failure response with the stale ident, causing the kernel to\nmatch and destroy the already-established channel via\nl2cap_chan_del(chan, ECONNRESET).\n\nClear chan-\u0026gt;ident for all matching channels on success, and harden the\nfailure path by using l2cap_chan_hold_unless_zero() consistent with\nother L2CAP handlers (l2cap_le_command_rej, __l2cap_get_chan_by_ident).(CVE-2026-63976)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()\n\nipv6_rpl_srh_decompress() computes:\n\n    outhdr-\u0026gt;hdrlen = (((n + 1) * sizeof(struct in6_addr)) \u0026gt;\u0026gt; 3);\n\nhdrlen is __u8. For n \u0026gt;= 127 the result exceeds 255 and silently\ntruncates. With n=127 (cmpri=15, cmpre=15, pad=0, hdrlen=16):\n\n    (128 * 16) \u0026gt;\u0026gt; 3 = 256, truncated to 0 as __u8\n\nThe caller in ipv6_rpl_srh_rcv() then places the compressed header\nat buf + ((ohdr-\u0026gt;hdrlen + 1) \u0026lt;\u0026lt; 3). With hdrlen=0 this is buf + 8,\nbut the decompressed region occupies buf[0..2055] (8-byte header\nplus 128 full addresses). The compressed header overlaps the\ndecompressed data, and ipv6_rpl_srh_compress() writes into this\noverlap, corrupting the routing header of the forwarded packet.\n\nThe existing guard at exthdrs.c:546 checks (n + 1) \u0026gt; 255, which\nprevents n+1 from overflowing unsigned char (the segments_left\nfield), but does not prevent the computed hdrlen from overflowing\n__u8. n=127 passes because 128 \u0026lt;= 255, yet hdrlen=256 does not\nfit.\n\nTighten the bound to (n + 1) \u0026gt; 127. This caps n at 126, giving\nhdrlen = (127 * 16) \u0026gt;\u0026gt; 3 = 254, which fits in __u8. The compressed\nheader then lands at buf + ((254 + 1) \u0026lt;\u0026lt; 3) = buf + 2040, exactly\npast the decompressed region (buf[0..2039]). No overlap. 127\nsegments is well beyond any realistic RPL deployment.(CVE-2026-63984)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nethtool: eeprom: add more safeties to EEPROM Netlink fallback\n\nThe Netlink fallback path for reading module EEPROM\n(fallback_set_params()) validates that offset \u0026lt; eeprom_len,\nbut does not check that offset + length stays within eeprom_len.\nThe ioctl equivalent (ethtool_get_any_eeprom() in ioctl.c) has\nalways enforced both bounds:\n\n  if (eeprom.offset + eeprom.len \u0026gt; total_len)\n      return -EINVAL;\n\nThis could lead to surprises in both drivers and device FW.\nAdd the missing offset + length validation to fallback_set_params(),\nmirroring the ioctl.\n\nSimilarly - ethtool core in general, and ethtool_get_any_eeprom()\nin particular tries to zero-init all buffers passed to the drivers\nto avoid any extra work of zeroing things out. eeprom_fallback()\nuses a plain kmalloc(), change it to zalloc.(CVE-2026-63985)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntunnels: do not assume transport header in iptunnel_pmtud_check_icmp()\n\nIn some cases, iptunnel_pmtud_check_icmp() can be called while\nskb transport header is not set.\n\nThis triggers an out-of-bound access, because\n(typeof(skb-\u0026gt;transport_header))~0U is 65535.\n\nAccess the icmp header based on IPv4 network header,\nafter making sure icmp-\u0026gt;type is present in skb linear part.\n\nNote that iptunnel_pmtud_check_icmpv6()) is fine.(CVE-2026-63992)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()\n\nskb_tunnel_check_pmtu() can change skb-\u0026gt;head.\n\nReusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF.\n\nUse instead ip_hdr(skb) as done in drivers/net/bareudp.c\nand drivers/net/geneve.c.\n\nFound by Sashiko.(CVE-2026-63993)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()\n\nSashiko found that iptunnel_pmtud_build_icmp() and\niptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ipv6_hdr()\nbefore an skb_cow() call which can reallocate skb-\u0026gt;head.\n\nFix this possible UAF by initializing the local variables\nafter the skb_cow() call.\n\nRemove skb_reset_network_header() calls which were not needed.(CVE-2026-63994)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv4: free net-\u0026gt;ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()\n\nipv4_sysctl_exit_net() is currently freeing net-\u0026gt;ipv4.sysctl_local_reserved_ports\ntoo soon.\n\nOnly after unregister_net_sysctl_table() we can be sure no threads can possibly\nuse the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.(CVE-2026-64002)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues\n\nWhile a SCSI host is in a recovery state, scsi_mq_requeue_cmd() will not\nset the requeue list for a requeued command to be kicked in the future.\nThe expectation is a call to scsi_run_host_queues() will kick all SCSI\ndevices once the recovery state is cleared.\n\nHowever, scsi_run_host_queues() uses shost_for_each_device() which uses\nscsi_device_get() and so will ignore devices in a partially removed\nstate like SDEV_CANCEL. But these devices may also have requeued\nrequests, leaving their requests stuck from not being kicked and causing\nthe removal process of the device to hang.\n\nscsi_run_host_queues() needs to run against more devices than the macro\nshost_for_each_device() allows. Instead of using the too limiting\nscsi_device_get() state checks, only ignore devices in SDEV_DEL state or\nwhen unable to acquire a reference. Attempt to run the queues for all\nother devices when scsi_run_host_queues() is called.(CVE-2026-64003)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsecurity/keys: fix missed RCU read section on lookup\n\nNicholas Carlini reports that the keyring code calls assoc_array_find()\nin find_key_to_update() without holding the RCU read lock, while the\nassoc_array_gc() code really is designed around removing the node from\nthe tree and then freeing it after an RCU grace-period.\n\nThe regular key handling doesn\u0026apos;t see this because holding the keyring\nsemaphore hides any lifetime issues, but the persistent key handling\nuses a different model.\n\nInstead of extending the keyring locking, just do the simple RCU locking\nthat the assoc_array was designed for.(CVE-2026-64015)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf, skmsg: fix verdict sk_data_ready racing with ktls rx\n\nsk_psock_strp_data_ready() already checks tls_sw_has_ctx_rx() and\ndefers to psock-\u0026gt;saved_data_ready when a TLS RX context is present,\navoiding a conflict with the TLS strparser\u0026apos;s ownership of the receive\nqueue (commit e91de6afa81c, \u0026quot;bpf: Fix running sk_skb program types\nwith ktls\u0026quot;).\n\nsk_psock_verdict_data_ready() has no equivalent guard.  When a socket\nis inserted into a sockmap (BPF_SK_SKB_VERDICT) before TLS RX is\nconfigured, tls_sw_strparser_arm() saves sk_psock_verdict_data_ready\nas rx_ctx-\u0026gt;saved_data_ready.  On data arrival:\n\n  tls_data_ready -\u0026gt; tls_strp_data_ready -\u0026gt; tls_rx_msg_ready\n    -\u0026gt; saved_data_ready() = sk_psock_verdict_data_ready()\n      -\u0026gt; tcp_read_skb() drains sk_receive_queue via __skb_unlink()\n         without calling tcp_eat_skb(), so copied_seq is not advanced.\n\ntls_strp_msg_load() then finds tcp_inq() \u0026gt;= full_len (stale), calls\ntcp_recv_skb() on the now-empty queue, hits WARN_ON_ONCE(!first), and\nreturns with rx_ctx-\u0026gt;strp.anchor.frag_list pointing at a psock-owned\n(potentially freed) skb.  tls_decrypt_sg() subsequently walks that\nfrag_list: use-after-free.\n\nApply the same fix as sk_psock_strp_data_ready(): if a TLS RX context\nis present, call psock-\u0026gt;saved_data_ready (sock_def_readable) to wake\nrecv() waiters and return immediately, leaving the receive queue\nuntouched.  TLS retains sole ownership of the queue and decrypts the\nrecord normally through tls_sw_recvmsg().(CVE-2026-64025)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbridge: mcast: Fix a possible use-after-free when removing a bridge port\n\nWhen per-VLAN multicast snooping is enabled, the bridge iterates over\nall the bridge ports, disables the per-port multicast context on each\nport and enables the per-{port, VLAN} multicast contexts instead. The\nreverse happens when per-VLAN multicast snooping is disabled.\n\nWhen global multicast snooping is enabled, the bridge iterates over all\nthe bridge ports and enables the per-port multicast context on each\nport. The reverse happens when multicast snooping is disabled.\n\nThe above scheme can result in a situation where both types of contexts\n(per-port and per-{port, VLAN}) are enabled on a single bridge port:\n\n # ip link add name br1 up type bridge mcast_snooping 1 mcast_querier 1 vlan_filtering 1\n # ip link add name dummy1 up master br1 type dummy\n # ip link set dev br1 type bridge mcast_vlan_snooping 1\n # ip link set dev br1 type bridge mcast_snooping 0\n # ip link set dev br1 type bridge mcast_snooping 1\n\nThis is not intended and it is a problem since the commit cited below.\nPrior to this commit, when removing a bridge port,\nbr_multicast_disable_port() would disable the per-port multicast context\nand the per-{port, VLAN} multicast contexts would get disabled when\nflushing VLANs.\n\nAfter this commit, br_multicast_disable_port() only disables the\nper-port multicast context if per-VLAN multicast snooping is disabled.\nIf both types of contexts were enabled on the port when it was removed,\nthe per-port multicast context would remain enabled when freeing the\nbridge port, leading to a use-after-free [1].\n\nFix by preventing the bridge from enabling / disabling the per-port\nmulticast contexts when toggling global multicast snooping if per-VLAN\nmulticast snooping is enabled.\n\n[1]\nODEBUG: free active (active state 0) object: ffff88810f8bda78 object type: timer_list hint: br_ip6_multicast_port_query_expired (net/bridge/br_multicast.c:1927)\nWARNING: lib/debugobjects.c:629 at debug_print_object+0x1b1/0x3e0, CPU#5: swapper/5/0\n[...]\nCall Trace:\n\u0026lt;IRQ\u0026gt;\n__debug_check_no_obj_freed (lib/debugobjects.c:1116)\nkfree (mm/slub.c:2620 mm/slub.c:6250 mm/slub.c:6565)\nkobject_cleanup (lib/kobject.c:689)\nrcu_do_batch (kernel/rcu/tree.c:2617)\nrcu_core (kernel/rcu/tree.c:2869)\nhandle_softirqs (kernel/softirq.c:622)\n__irq_exit_rcu (kernel/softirq.c:656 kernel/softirq.c:496 kernel/softirq.c:735)\nirq_exit_rcu (kernel/softirq.c:752)\nsysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1061 (discriminator 47) arch/x86/kernel/apic/apic.c:1061 (discriminator 47))\n\u0026lt;/IRQ\u0026gt;(CVE-2026-64032)\n\nIn the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG. Sashiko points out that if end = 0 (start != 0) the current code will create a chain link to content type right after the wrap link. This would create a chain where the wrap link points directly to another chain link. The scatterlist API sg_next iterator does not recursively resolve consecutive chain links, meaning this is illegal input to crypto. The wrapping link is unnecessary if end = 0. TLS 1.3 can use the \u0026quot;wrapping slot\u0026quot; for its chaining if end = 0, which avoids the chain-after-chain.(CVE-2026-64046)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring\n\nWhen an sk_msg scatterlist ring wraps (sg.end \u0026lt; sg.start),\ntls_push_record() chains the tail portion of the ring to the head\nusing sg_chain(). An extra entry in the sg array is reserved for\nthis:\n\n  struct sk_msg_sg {\n        [...]\n        /* The extra two elements:\n         * 1) used for chaining the front and sections when the list becomes\n         *    partitioned (e.g. end \u0026lt; start). The crypto APIs require the\n         *    chaining;\n         * 2) to chain tailer SG entries after the message.\n         */\n        struct scatterlist              data[MAX_MSG_FRAGS + 2];\n\nThe current code uses MAX_SKB_FRAGS + 1 as the ring size:\n\n    sg_chain(\u0026amp;msg_pl-\u0026gt;sg.data[msg_pl-\u0026gt;sg.start],\n             MAX_SKB_FRAGS - msg_pl-\u0026gt;sg.start + 1,\n             msg_pl-\u0026gt;sg.data);\n\nThis places the chain pointer at\n\n  sg_chain(data[start], (MAX_SKB_FRAGS - msg_start + 1) .. =\n  \u0026amp;data[start] + (MAX_SKB_FRAGS - msg_start + 1) - 1 =\n  data[start + (MAX_SKB_FRAGS - start + 1) - 1] =\n  data[MAX_SKB_FRAGS]\n\ninstead of the true last entry. This is likely due to a \u0026quot;race\u0026quot; of\nthe commit under Fixes landing close to\ncommit 031097d9e079 (\u0026quot;bpf: sk_msg, zap ingress queue on psock down\u0026quot;)\n\nConvert to ARRAY_SIZE and drop the data[start] / - start (as suggested\nby Sabrina).(CVE-2026-64047)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nirq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT\n\nOn PREEMPT_RT, non-HARD irq_work runs in per-CPU kthreads via\nrun_irq_workd(), so irq_work_sync() uses rcuwait() to wait for BUSY==0.\n\nAfter irq_work_single() clears BUSY via atomic_cmpxchg(), it still\ndereferences @work for irq_work_is_hard() and rcuwait_wake_up().\n\nAn irq_work_sync() caller on another CPU that enters after BUSY is cleared\ncan observe BUSY==0 immediately, return, and free the work before those\naccesses complete — causing a use-after-free.\n\nFix this by wrapping run_irq_workd() in guard(rcu)() so that the entire\nirq_work_single() execution is within an RCU read-side critical\nsection. Then add synchronize_rcu() in irq_work_sync() after\nrcuwait_wait_event() to ensure the caller waits for the RCU grace period\nbefore returning, preventing premature frees.(CVE-2026-64073)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: eb_tables: close module init race\n\nsashiko reports for unrelated patch:\n Does the core ebtables initialization in ebtables.c suffer from a similar race?\n Once nf_register_sockopt() completes, the sockopts are exposed globally.\n\nsockopt has to be registered last, just like in ip/ip6/arptables.(CVE-2026-64076)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: move to two-stage removal scheme\n\nLike previous patches for x_tables, follow same pattern in ebtables.\nWe can\u0026apos;t reuse xt helpers: ebt_table struct layout is incompatible.\n\ntable-\u0026gt;ops assignment is now done while still holding the ebt mutex\nto make sure we never expose partially-filled table struct.(CVE-2026-64077)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tt: fix negative tt_buff_len\n\nbatadv_orig_node::tt_buff_len was declared as s16, but the field is never\nintended to hold a negative value. When a value greater than 32767 is\nassigned, it wraps to a negative signed integer.\n\nIn batadv_send_other_tt_response(), tt_buff_len is temporarily widened to\ns32. The incorrectly negative s16 value propagates into the s32, causing\nbatadv_tt_prepare_tvlv_global_data() to allocate a full sized buffer but\npopulates only a small portion of it with the collected changeset. All\nremaining bits are kept uninitialized.\n\nUsing an u16 avoids this type confusion and ensures that no (negative) sign\nextension is performed in batadv_send_other_tt_response().(CVE-2026-64088)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tt: fix negative last_changeset_len\n\nbatadv_piv_tt::last_changeset_len len was declared as s16, but the field is\nnever intended to hold a negative value. When a value greater than 32767 is\nassigned, it wraps to a negative signed integer.\n\nIn batadv_send_my_tt_response(), last_changeset_len is temporarily widened\nto s32. The incorrectly negative s16 value propagates into the s32, causing\nbatadv_tt_prepare_tvlv_local_data() to allocate a full sized buffer but\npopulates only a small portion of it with the collected changeset. All\nremaining bits are kept uninitialized.\n\nUsing an u16 avoids this type confusion and ensures that no (negative) sign\nextension is performed in batadv_send_my_tt_response().(CVE-2026-64089)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: bla: avoid double decrement of bla.num_requests\n\nThe bla.num_requests is increased when no request_sent was in progress. And\nit is decremented in various places (announcement was received, backbone is\npurged, periodic work). But the check if the request_sent is actually set\nto a specific state and the atomic_dec/_inc are not safe because they are\nnot atomic (TOCTOU) and multiple such code portions can run concurrently.\n\nAt the same time, it is necessary to modify request_sent (state) and\nbla.num_requests atomically. Otherwise batadv_bla_send_request() might set\nrequest_sent to 1 and is interrupted.  batadv_handle_announce() can then\nset request_sent back to 0 and decrement num_requests before\nbatadv_bla_send_request() incremented it.\n\nThe two operations must therefore be locked. And since state (request_sent)\nand wait_periods are only accessed inside this lock, they can be converted\nto simpler datatypes. And to avoid that the bla.num_requests is touched by\na parallel running context with a valid backbone_gw reference after\nbatadv_bla_purge_backbone_gw() ran, a third state \u0026quot;stopped\u0026quot; is required to\ncorrectly signal that a backbone_gw is in the state of being cleaned up.(CVE-2026-64095)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Validate GPIO pin LUT table size before iterating\n\n[Why\u0026amp;How]\nThe GPIO pin table parsers in get_gpio_i2c_info() and\nbios_parser_get_gpio_pin_info() derive an element count from the VBIOS\ntable_header.structuresize field, then iterate over gpio_pin[] entries.\nHowever, GET_IMAGE() only validates that the table header itself fits\nwithin the BIOS image. If the VBIOS reports a structuresize larger than\nthe actual mapped data, the loop reads past the end of the BIOS image,\ncausing an out-of-bounds read.\n\nFix this by calling bios_get_image() to validate that the full claimed\nstructuresize is accessible within the BIOS image before entering the\nloop in both functions.\n\n(cherry picked from commit ba5e95b43b773ae1bf1f66ee6b31eb774e65afe3)(CVE-2026-64097)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: use uninterruptible resv lock for plane updates\n\nvirtio_gpu_cursor_plane_update() and virtio_gpu_resource_flush() lock\nthe framebuffer BO\u0026apos;s dma_resv via virtio_gpu_array_lock_resv() and\nignore its return value. The function can fail with -EINTR from\ndma_resv_lock_interruptible() (signal during lock wait) or with\n-ENOMEM from dma_resv_reserve_fences() (fence slot allocation),\nleaving the resv lock not held. The queue path then walks the object\narray and calls dma_resv_add_fence(), which requires the lock held;\nwith lockdep enabled this trips dma_resv_assert_held():\n\n  WARNING: drivers/dma-buf/dma-resv.c:296 at dma_resv_add_fence+0x71e/0x840\n  Call Trace:\n   virtio_gpu_array_add_fence\n   virtio_gpu_queue_ctrl_sgs\n   virtio_gpu_queue_fenced_ctrl_buffer\n   virtio_gpu_cursor_plane_update\n   drm_atomic_helper_commit_planes\n   drm_atomic_helper_commit_tail\n   commit_tail\n   drm_atomic_helper_commit\n   drm_atomic_commit\n   drm_atomic_helper_update_plane\n   __setplane_atomic\n   drm_mode_cursor_universal\n   drm_mode_cursor_common\n   drm_mode_cursor_ioctl\n   drm_ioctl\n   __x64_sys_ioctl\n\nBeyond the WARN, mutating the dma_resv fence list without the lock\nraces with concurrent readers/writers and can corrupt the list.\n\nBoth call sites run inside the .atomic_update plane callback, which\nDRM atomic helpers do not allow to fail (by the time it runs, the\ncommit has been signed off to userspace and there is no clean\nrollback path). Moving the lock acquisition to .prepare_fb was\nrejected because the broader lock scope deadlocks against other BO\nlocking paths in the same atomic commit.\n\nIntroduce virtio_gpu_lock_one_resv_uninterruptible() that uses\ndma_resv_lock() instead of dma_resv_lock_interruptible(). This\neliminates the -EINTR failure mode -- the realistic syzbot trigger\n-- without extending the lock hold across the commit. The helper\nlocks a single BO and rejects nents \u0026gt; 1 with -EINVAL; both fix\nsites lock exactly one BO.\n\nUse it from virtio_gpu_cursor_plane_update() and\nvirtio_gpu_resource_flush(); check the return value to handle the\nremaining -ENOMEM case from dma_resv_reserve_fences() by freeing\nthe objs and skipping the plane update for that frame. The\nframebuffer BOs touched here are not shared with other contexts\nand lock contention is expected to be brief, so the loss of\nsignal-interruptibility is acceptable.\n\nOther callers of virtio_gpu_array_lock_resv() (the ioctl paths)\ncontinue to use the interruptible variant.\n\nThe bug was reported by syzbot, triggered via fault injection\n(fail_nth) on the DRM_IOCTL_MODE_CURSOR path, which forces the\n-ENOMEM branch in dma_resv_reserve_fences().(CVE-2026-64098)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits\n\nUserspace can restore an ITS Device Table Entry whose Size field encodes\nmore EventID bits than the virtual ITS supports.  The live MAPD path\nrejects that state, but vgic_its_restore_dte() accepts it and stores the\nout-of-range value in dev-\u0026gt;num_eventid_bits.\n\nReject restored DTEs with num_eventid_bits \u0026gt; VITS_TYPER_IDBITS before\nallocating the device.  This mirrors the MAPD check and prevents the\nrestored state from reaching vgic_its_restore_itt(), where the unchecked\nvalue can be converted into an oversized scan_its_table() range.(CVE-2026-64106)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Fix UAF read of tail-\u0026gt;len in unix_stream_data_wait()\n\nunix_stream_data_wait() does skb_peek_tail(\u0026amp;sk-\u0026gt;sk_receive_queue) without\nholding any lock that prevents SKBs on that queue from being dequeued and\nfreed.\nThis has been the case since commit 79f632c71bea (\u0026quot;unix/stream: fix\npeeking with an offset larger than data in queue\u0026quot;).\nThe first consequence of this is that the pointer comparison\n`tail != last` can be false even if `last` semantically refers to an\nalready-freed SKB while `tail` is a new SKB allocated at the same address;\nwhich can cause unix_stream_data_wait() to wrongly keep blocking after new\ndata has arrived, but only in a weird scenario where a peeking recv() and\na normal recv() on the same socket are racing, which is probably not a\nreal problem.\n\nBut since commit 2b514574f7e8 (\u0026quot;net: af_unix: implement splice for stream\naf_unix sockets\u0026quot;), `tail` is actually dereferenced, which can cause UAF in\nthe following race scenario (where test_setup() runs single-threaded,\nand afterwards, test_thread1() and test_thread2() run concurrently in\ntwo threads:\n```\nstatic int socks[2];\nvoid test_setup(void) {\n  socketpair(AF_UNIX, SOCK_STREAM, 0, socks);\n  send(socks[1], \u0026quot;A\u0026quot;, 1, 0);\n  int peekoff = 1;\n  setsockopt(socks[0], SOL_SOCKET, SO_PEEK_OFF, \u0026amp;peekoff, sizeof(peekoff));\n}\nvoid test_thread1(void) {\n  char dummy;\n  recv(socks[0], \u0026amp;dummy, 1, MSG_PEEK);\n}\nvoid test_thread2(void) {\n  char dummy;\n  recv(socks[0], \u0026amp;dummy, 1, 0);\n  shutdown(socks[1], SHUT_WR);\n}\n```\n\nwhen racing like this:\n```\nthread1                       thread2\nunix_stream_read_generic\n  mutex_lock(\u0026amp;u-\u0026gt;iolock)\n  skb_peek(\u0026amp;sk-\u0026gt;sk_receive_queue)\n  skb_peek_next(skb, \u0026amp;sk-\u0026gt;sk_receive_queue)\n  mutex_unlock(\u0026amp;u-\u0026gt;iolock)\n                              unix_stream_read_generic\n                                unix_state_lock(sk)\n                                skb_peek(\u0026amp;sk-\u0026gt;sk_receive_queue)\n                                unix_state_unlock(sk)\n  unix_stream_data_wait\n    unix_state_lock(sk)\n    tail = skb_peek_tail(\u0026amp;sk-\u0026gt;sk_receive_queue)\n                                spin_lock(\u0026amp;sk-\u0026gt;sk_receive_queue.lock)\n                                __skb_unlink(skb, \u0026amp;sk-\u0026gt;sk_receive_queue)\n                                spin_unlock(\u0026amp;sk-\u0026gt;sk_receive_queue.lock)\n                                consume_skb(skb) [frees the SKB]\n    `tail != last`: false\n    `tail`: true\n    `tail-\u0026gt;len != last_len` ***UAF***\n```\n\nFix the UAF by removing the read of tail-\u0026gt;len; checking tail-\u0026gt;len would\nonly make sense if SKBs in the receive queue of a UNIX socket could grow,\nwhich can no longer happen.\n\nKuniyuki explained:\n\n\u0026gt; When commit 869e7c62486e (\u0026quot;net: af_unix: implement stream sendpage\n\u0026gt; support\u0026quot;) added sendpage() support, data could be appended to the last\n\u0026gt; skb in the receiver\u0026apos;s queue.\n\u0026gt;\n\u0026gt; That\u0026apos;s why we needed to check if the length of the last skb was changed\n\u0026gt; while waiting for new data in unix_stream_data_wait().\n\u0026gt;\n\u0026gt; However, commit a0dbf5f818f9 (\u0026quot;af_unix: Support MSG_SPLICE_PAGES\u0026quot;) and\n\u0026gt; commit 57d44a354a43 (\u0026quot;unix: Convert unix_stream_sendpage() to use\n\u0026gt; MSG_SPLICE_PAGES\u0026quot;) refactored sendmsg(), and now data is always added\n\u0026gt; to a new skb.\n\nThat means this fix is not suitable for kernels before 6.5.(CVE-2026-64109)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrbd: eliminate a race in lock_dwork draining on unmap\n\nGiven how rbd_lock_add_request() and rbd_img_exclusive_lock() are\nwritten, lock_dwork may be (re)queued more than it\u0026apos;s actually needed:\nfor example in case a new I/O request comes in while we are in the\nmiddle of rbd_acquire_lock() on behalf of another I/O request.  This is\nexpected and with rbd_release_lock() preemptively canceling lock_dwork\nis benign under normal operation.\n\nA more problematic example is maybe_kick_acquire():\n\n    if (have_requests || delayed_work_pending(\u0026amp;rbd_dev-\u0026gt;lock_dwork)) {\n            dout(\u0026quot;%s rbd_dev %p kicking lock_dwork\\n\u0026quot;, __func__, rbd_dev);\n            mod_delayed_work(rbd_dev-\u0026gt;task_wq, \u0026amp;rbd_dev-\u0026gt;lock_dwork, 0);\n    }\n\nIt\u0026apos;s not unrealistic for lock_dwork to get canceled right after\ndelayed_work_pending() returns true and for mod_delayed_work() to\nrequeue it right there anyway.  This is a classic TOCTOU race.\n\nWhen it comes to unmapping the image, there is an implicit assumption\nof no self-initiated exclusive lock activity past the point of return\nfrom rbd_dev_image_unlock() which unlocks the lock if it happens to be\nheld.  This unlock is assumed to be final and lock_dwork (as well as\nall other exclusive lock tasks, really) isn\u0026apos;t expected to get queued\nagain.  However, lock_dwork is canceled only in cancel_tasks_sync()\n(i.e. later in the unmap sequence) and on top of that the cancellation\ncan get in effect nullified by maybe_kick_acquire().  This may result\nin rbd_acquire_lock() executing after rbd_dev_device_release() and\nrbd_dev_image_release() run and free and/or reset a bunch of things.\nOne of the possible failure modes then is a violated\n\n    rbd_assert(rbd_image_format_valid(rbd_dev-\u0026gt;image_format));\n\nin rbd_dev_header_info() which is called via rbd_dev_refresh() from\nrbd_post_acquire_action().\n\nRedo exclusive lock task draining to provide saner semantics and try\nto meet the assumptions around rbd_dev_image_unlock().(CVE-2026-64112)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nixgbevf: fix use-after-free in VEPA multicast source pruning\n\nixgbevf_clean_rx_irq() prunes frames whose source MAC matches the VF\u0026apos;s\nown address (VEPA multicast workaround) by freeing the skb and\ncontinuing to the next descriptor:\n\n    dev_kfree_skb_irq(skb);\n    continue;\n\nThe skb pointer is declared outside the while loop and persists across\niterations.  Because the continue skips the \u0026quot;skb = NULL\u0026quot; reset at the\nbottom of the loop, the next iteration enters the \u0026quot;else if (skb)\u0026quot; path\nand calls ixgbevf_add_rx_frag() on the freed skb, dereferencing\nskb_shinfo(skb)-\u0026gt;nr_frags - a use-after-free in NAPI softirq context.\n\nThe sibling driver iavf already handles this correctly by nulling the\npointer before continuing.  Apply the same pattern here.\n\nI do not have ixgbevf hardware; the bug was found by static analysis\n(scan_drop_continue_loops.py + semgrep drop_continue_in_loop, multi-tool\ncorroboration with the highest score in the scan).  The UAF was confirmed\nunder KASAN by loading a test module that reproduces the exact code\npattern (alloc skb, kfree_skb, then read skb_shinfo(skb)-\u0026gt;nr_frags):\n\n  BUG: KASAN: slab-use-after-free in ixgbevf_uaf_test_init+0x100/0x1000\n  Read of size 8 at addr 000000006163ae78 by task insmod/30\n  freed 208-byte region [000000006163adc0, 000000006163ae90)\n\nQEMU emulates igb (82576) but not ixgbe (82599), and the igbvf VF\ndriver does not include the VEPA source pruning path, so a full\nend-to-end reproduction with emulated hardware was not possible.(CVE-2026-64113)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv4: raw: reject IP_HDRINCL packets with ihl \u0026lt; 5\n\nraw_send_hdrinc() validates that the caller-supplied IPv4 header\nfits within the message length:\n\n    iphlen = iph-\u0026gt;ihl * 4;\n    err = -EINVAL;\n    if (iphlen \u0026gt; length)\n        goto error_free;\n\n    if (iphlen \u0026gt;= sizeof(*iph)) {\n        /* fix up saddr, tot_len, id, csum, transport_header */\n    }\n\nIt does not, however, reject ihl \u0026lt; 5.  For such a packet the\n\u0026quot;if (iphlen \u0026gt;= sizeof(*iph))\u0026quot; branch is skipped, leaving the\ncrafted iphdr untouched, but the packet is still handed to\n__ip_local_out() and onward.  Downstream consumers that read\niph-\u0026gt;ihl assume a sane value: net/ipv4/ah4.c:ah_output() in\nparticular subtracts sizeof(struct iphdr) from top_iph-\u0026gt;ihl * 4\nand passes the (signed-int-negative, then cast to size_t)\nresult to memcpy(), producing an OOB access of length close to\nSIZE_MAX and a host kernel panic.\n\nAn IPv4 header with ihl \u0026lt; 5 is malformed by definition (RFC 791:\n\u0026quot;Internet Header Length is the length of the internet header in\n32 bit words ... Note that the minimum value for a correct header\nis 5.\u0026quot;).  The kernel should not be willing to inject such a\npacket into its own output path.\n\nReject \u0026quot;iphlen \u0026lt; sizeof(*iph)\u0026quot; alongside the existing\n\u0026quot;iphlen \u0026gt; length\u0026quot; check.  This matches the principle that locally\nconstructed packets that re-enter the IP stack must pass the same\nbasic sanity tests that a foreign packet would be subjected to.\n\nOnce this lands, the \u0026quot;if (iphlen \u0026gt;= sizeof(*iph))\u0026quot; wrapper around\nthe fixup branch becomes redundant; left in place to keep the\npatch minimal and backport-friendly.  A follow-up can unwrap it.\n\nNote that commit 86f4c90a1c5c (\u0026quot;ipv4, ipv6: ensure raw socket\nmessage is big enough to hold an IP header\u0026quot;) ensures the message\nbuffer is large enough to hold an iphdr, but does not constrain\nthe self-reported iph-\u0026gt;ihl.\n\nReachability: the malformed packet source is any caller with\nCAP_NET_RAW, including an unprivileged process in a user+net\nnamespace on a kernel with CONFIG_USER_NS=y.  The reproduced AH\ncrash also requires a matching xfrm AH policy on the outgoing\nroute; a container granted CAP_NET_ADMIN can install that state\nand policy in its netns.  Loopback bypasses xfrm_output, so the\ntrigger uses a real netdev.\n\nReproduced on UML + KASAN: kernel-mode fault at addr 0x0 with\nmemcpy_orig at the crash site.  Same shape reproduces inside a\nrootless Docker container with --cap-add NET_ADMIN on a stock\ndistro kernel.(CVE-2026-64114)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nqed: fix double free in qed_cxt_tables_alloc()\n\nIf one of the later PF or VF CID bitmap allocations fails,\nqed_cid_map_alloc() jumps to cid_map_fail and frees the previously\nallocated CID bitmaps before returning an error. qed_cxt_tables_alloc()\nthen calls qed_cxt_mngr_free(), which invokes qed_cid_map_free()\nagain.\n\nFix this by setting each CID bitmap pointer to NULL after bitmap_free()\nto avoid double free.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing\nv6.13-rc1. The tool is still under development and is not yet publicly\navailable. Manual inspection confirms that the bug is still\npresent in v7.1-rc3.\n\nRuntime reproduction was not attempted because exercising the failing\nallocation path requires device-specific setup.(CVE-2026-64118)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate Add Extended Advertising Data length\n\nMGMT_OP_ADD_EXT_ADV_DATA is registered as a variable-length command,\nwith MGMT_ADD_EXT_ADV_DATA_SIZE as the fixed header size.  The handler\nthen uses cp-\u0026gt;adv_data_len and cp-\u0026gt;scan_rsp_len to validate and copy\ncp-\u0026gt;data, but it never checks that those bytes are part of the mgmt\ncommand payload.\n\nA short command can therefore make add_ext_adv_data() pass an\nout-of-bounds pointer into tlv_data_is_valid().  If the bytes beyond\nthe command buffer are addressable, they can also be copied into the\nadvertising instance as scan response data, where the caller can read\nthem back via MGMT_OP_GET_ADV_INSTANCE.  The trigger requires\nCAP_NET_ADMIN in the initial user namespace; KASAN reports an 8-byte\nslab-out-of-bounds read.\n\nReject commands whose length does not match the fixed header plus both\nadvertising data lengths before parsing cp-\u0026gt;data.(CVE-2026-64126)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()\n\nCommit 96c4af418586 (\u0026quot;cifs: Fix locking usage for tcon fields\u0026quot;)\nrefactored cifs code to change cifs_tcp_ses_lock for tc_lock around\ntc_count changes.\n\nThere was missing lock around tc_count increment inside\nsmb2_find_smb_sess_tcon_unlocked().(CVE-2026-64136)\n\nIn the Linux kernel, an out-of-bounds read vulnerability exists in the i2c-stub driver. The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() function (drivers/i2c/i2c-stub.c) uses data-\u0026gt;block[0] as the transfer length. The existing check only clamps it to avoid overrunning the chip-\u0026gt;words[256] register array, but does not validate it against I2C_SMBUS_BLOCK_MAX (32), which is the limit of the union i2c_smbus_data.block buffer. A local user with access to /dev/i2c-* devices can issue an I2C_SMBUS ioctl with I2C_SMBUS_I2C_BLOCK_DATA and data-\u0026gt;block[0] \u0026gt; 32, causing stub_xfer() to read or write past the end of the union i2c_smbus_data.block buffer, resulting in a stack out-of-bounds access. This vulnerability affects confidentiality, integrity, and availability.(CVE-2026-64191)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async\n\n[Why\u0026amp;How]\ndc_process_dmub_aux_transfer_async() copies payload-\u0026gt;length bytes into a\n16-byte stack buffer (dpaux.data[16]) guarded only by an ASSERT(), which\nis a no-op in release builds. If a caller ever passes length \u0026gt; 16 this\nresults in a stack buffer overflow via memcpy.\n\nAdditionally, link_index is used to dereference dc-\u0026gt;links[] without\nbounds checking against dc-\u0026gt;link_count, risking an out-of-bounds access.\n\nReplace the ASSERT with a hard runtime check that returns false when\npayload-\u0026gt;length exceeds the destination buffer size, and add a bounds\ncheck for link_index before it is used.\n\n(cherry picked from commit ba4caa9fecdf7a38f98c878ad05a8a64148b6881)(CVE-2026-64219)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: avoid double free of pool-\u0026gt;stack on AQ init failure\n\notx2_pool_aq_init() frees pool-\u0026gt;stack when mailbox sync or retry\nallocation fails, but leaves the pointer unchanged. Later,\notx2_sq_aura_pool_init() unwinds the partial setup through\notx2_aura_pool_free(), which frees pool-\u0026gt;stack again. The CN20K-specific\ncn20k_pool_aq_init() implementation has the same bug in\nits corresponding error path.\n\nSet pool-\u0026gt;stack to NULL immediately after the local free so the shared\ncleanup path does not free the same stack again while cleaning up\npartially initialized pool state.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing\nv6.13-rc1. The tool is still under development and is not yet publicly\navailable. Manual inspection confirms that the bug is still present in\nv7.1-rc3.\n\nRuntime validation was not performed because reproducing this path\nrequires OcteonTX2/CN20K hardware.(CVE-2026-64222)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nInput: elan_i2c - validate firmware size before use\n\nEnsure that the firmware file is large enough to contain the expected\nnumber of pages and the signature (which resides at the end of the\nfirmware blob) before accessing them to prevent potential out-of-bounds\nreads.(CVE-2026-64237)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: hyper-v: Bound the bank index when querying sparse banks\n\nWhen checking if a VP ID is included in a sparse bank set, explicitly check\nthat the ID can actually be contained in a sparse bank (the TLFS allows for\na maximum of 64 banks of 64 vCPUs each).  When handling a paravirtual TLB\nflush for L2, the VP ID is copied verbatim from the enlightened VMCS,\nwithout any bounds check, i.e. isn\u0026apos;t guaranteed to be under the limit of\n4096.\n\nFailure to check the bounds of the VP ID leads to an out-of-bounds read\nwhen testing the sparse bank, and super strictly speaking could lead to KVM\nperforming an unnecessary TLB flush for an L2 vCPU.\n\n  ==================================================================\n  BUG: KASAN: use-after-free in hv_is_vp_in_sparse_set+0x85/0x100 [kvm]\n  Read of size 8 at addr ffff88811ba5f598 by task hyperv_evmcs/2802\n\n  CPU: 12 UID: 1000 PID: 2802 Comm: hyperv_evmcs Not tainted 7.1.0-rc2 #7 PREEMPT\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n  Call Trace:\n   \u0026lt;TASK\u0026gt;\n   dump_stack_lvl+0x51/0x60\n   print_report+0xcb/0x5d0\n   kasan_report+0xb4/0xe0\n   kasan_check_range+0x35/0x1b0\n   hv_is_vp_in_sparse_set+0x85/0x100 [kvm]\n   kvm_hv_flush_tlb+0xe9e/0x16c0 [kvm]\n   kvm_hv_hypercall+0xe6b/0x1e60 [kvm]\n   vmx_handle_exit+0x485/0x1b60 [kvm_intel]\n   kvm_arch_vcpu_ioctl_run+0x22e3/0x5070 [kvm]\n   kvm_vcpu_ioctl+0x5d0/0x10c0 [kvm]\n   __x64_sys_ioctl+0x129/0x1a0\n   do_syscall_64+0xb9/0xcf0\n   entry_SYSCALL_64_after_hwframe+0x4b/0x53\n  RIP: 0033:0x7f0e62d1a9bf\n   \u0026lt;/TASK\u0026gt;\n\n  The buggy address belongs to the physical page:\n  page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x11ba5f\n  flags: 0x4000000000000000(zone=1)\n  raw: 4000000000000000 0000000000000000 00000000ffffffff 0000000000000000\n  raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000\n  page dumped because: kasan: bad access detected\n\n  Memory state around the buggy address:\n   ffff88811ba5f480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n   ffff88811ba5f500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n  \u0026gt;ffff88811ba5f580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n                              ^\n   ffff88811ba5f600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n   ffff88811ba5f680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n  ==================================================================\n  Disabling lock debugging due to kernel taint\n\nOpportunistically add a compile time assertion to ensure the maximum number\nof sparse banks exactly matches the number of possible bits in the passed\nin mask.\n\n[sean: add KASAN splat, drop comment, add assert, massage changelog](CVE-2026-64247)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4: include MAY_WRITE in open permission mask for O_TRUNC\n\nPOSIX requires write permission to truncate a file, so an open() that\nspecifies O_TRUNC must be authorized for write access regardless of the\nO_ACCMODE access mode.\n\nnfs_open_permission_mask() builds the access mask passed to\nnfs_may_open(), which is the local authorization gate for OPENs the\nclient serves itself from a cached write delegation via the\ncan_open_delegated() path in nfs4_try_open_cached().  The mask is\nderived from O_ACCMODE alone, so an open(O_RDONLY | O_TRUNC) against a\nfile the caller cannot write requests only MAY_READ and passes the\nlocal check.  The OPEN is then satisfied locally and the truncation is\nissued to the server as a SETATTR(size=0) over the delegation stateid,\nwhich the server accepts under standard write-delegation semantics.\nPOSIX requires that this open fail with EACCES.\n\nInclude MAY_WRITE in the mask whenever O_TRUNC is set so the local\ncheck matches the access the server would have enforced.(CVE-2026-64298)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent out-of-bounds read in glob matching\n\nString event fields are not necessarily NUL-terminated, so the filter\npredicate functions (filter_pred_string(), filter_pred_strloc() and\nfilter_pred_strrelloc()) pass the field length to the regex match\ncallbacks, and the length-aware matchers honour it.\n\nregex_match_glob() was the exception: it ignored the length and called\nglob_match(), which scans the string until it hits a NUL byte. Some\nstring fields are not NUL-terminated. One example is the dynamic char\narray of the xfs_* namespace tracepoints, which is copied without a\ntrailing NUL. For such a field, glob matching reads past the end of\nthe event field, causing a KASAN slab-out-of-bounds read in\nglob_match(), reached via regex_match_glob() and filter_match_preds()\nfrom the xfs_lookup tracepoint.\n\nAdd a length-bounded glob_match_len() and use it from regex_match_glob()\nso glob matching always stops at the field boundary. The matching loop\nis factored into a shared helper so glob_match() keeps its behaviour.(CVE-2026-64299)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - validate RSA CRT component lengths\n\nThe generic RSA key parser (rsa_helper.c) bounds each CRT component (p,\nq, dp, dq, qinv) by the modulus size n_sz, but qat_rsa_setkey_crt()\nallocates half-size DMA buffers (key_sz / 2) and right-aligns each\ncomponent with:\n\n    memcpy(dst + half_key_sz - len, src, len)\n\nWhen a CRT component is larger than half_key_sz the subtraction\nunderflows and memcpy writes past the DMA buffer, causing memory\ncorruption.\n\nAdd a len \u0026gt; half_key_sz check next to the existing !len check for each\nof the five CRT components so the driver falls back to the non-CRT path\ninstead of writing out of bounds.(CVE-2026-64304)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - protect service table iterations with service_lock\n\nThe service_table list is protected by service_lock when entries are\nadded or removed (in adf_service_add() and adf_service_remove()), but\nseveral functions iterate over the list without holding this lock.\n\nA concurrent adf_service_register() or adf_service_unregister() call\ncould modify the list during traversal, leading to list corruption or\na use-after-free.\n\nFix this by holding service_lock across all list_for_each_entry()\niterations of service_table in adf_dev_init(), adf_dev_start(),\nadf_dev_stop(), adf_dev_shutdown(), adf_dev_restarting_notify(),\nadf_dev_restarted_notify(), and adf_error_notifier().\n\nThe lock ordering is safe: callers of the static helpers (adf_dev_up()\nand adf_dev_down()) acquire state_lock before service_lock, and no\nevent_hld callback or service_lock holder ever acquires state_lock in\nthe reverse order.(CVE-2026-64305)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: drbg - Fix returning success on failure in CTR_DRBG\n\ndrbg_ctr_generate() sometimes returns success when it fails, leaving the\noutput buffer uninitialized.  Fix it.(CVE-2026-64306)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - restore callback for non-parallel fallback\n\npcrypt installs pcrypt_aead_done() on the child AEAD request before\ntrying to submit it through padata.  If padata_do_parallel() returns\n-EBUSY, pcrypt falls back to calling the child AEAD directly.\n\nThat fallback must not keep the padata completion callback.  Otherwise\nan asynchronous completion runs pcrypt_aead_done() even though the\nrequest was never enrolled in padata.\n\nRestore the original request callback and callback data before calling\nthe child AEAD directly.  This keeps the fallback path aligned with a\ndirect AEAD request while leaving the parallel path unchanged.(CVE-2026-64312)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ecc - Fix carry overflow in vli multiplication\n\nThe carry flag calculation fails when r01.m_high is saturated\n(0xFFFFFFFFFFFFFFFF) and addition of lower bits overflows.\n\nThe condition (r01.m_high \u0026lt; product.m_high) doesn\u0026apos;t handle the case\nwhere r01.m_high == product.m_high and an additional carry exists\nfrom lower-bit overflow.\n\nWhen commit 3c4b23901a0c (\u0026quot;crypto: ecdh - Add ECDH software support\u0026quot;)\nintroduced crypto/ecc.c, it split the muladd() function in the\nmicro-ecc library into separate mul_64_64() and add_128_128() helpers.\nIt seems the check got lost in translation.\n\nAdd proper handling for this boundary by accounting for the carry\nfrom the lower addition.(CVE-2026-64313)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nisofs: bound Rock Ridge symlink components to the SL record\n\nget_symlink_chunk() and the SL handling in\nparse_rock_ridge_inode_internal() walk the variable-length components of\na Rock Ridge \u0026quot;SL\u0026quot; (symbolic link) record.  Each component is a two-byte\nheader (flags, len) followed by len bytes of text, so it occupies\nslp-\u0026gt;len + 2 bytes.  Both loops read slp-\u0026gt;len and advance to the next\ncomponent, and get_symlink_chunk() additionally does\nmemcpy(rpnt, slp-\u0026gt;text, slp-\u0026gt;len), but neither checks that the component\nlies within the SL record before dereferencing it.\n\nA crafted SL record whose component declares a len that runs past the\nrecord (rr-\u0026gt;len) therefore triggers an out-of-bounds read of up to 255\nbytes.  When the record sits at the tail of its backing buffer - for\nexample a small kmalloc()ed continuation block reached through a CE\nrecord - the read crosses the allocation; get_symlink_chunk() then\ncopies the out-of-bounds bytes into the symlink body returned to user\nspace by readlink(), disclosing adjacent kernel memory.\n\nISO 9660 images are routinely mounted from untrusted removable media -\ndesktop environments auto-mount them (e.g. via udisks2) without\nCAP_SYS_ADMIN - so the record contents are attacker-controlled.\n\nReject any component that does not fit in the remaining record bytes\nbefore using it.  In get_symlink_chunk() return NULL, like the existing\noutput-buffer (plimit) checks, so a malformed record makes readlink()\nfail with -EIO rather than silently returning a truncated target; in\nparse_rock_ridge_inode_internal() stop the inode-size walk.(CVE-2026-64317)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: validate reply message payload bounds against transfer length\n\nnvmet_auth_reply() accesses the variable-length rval[] array using\nattacker-controlled hl (hash length) and dhvlen (DH value length) fields\nwithout verifying they fit within the allocated buffer of tl bytes.\n\nA malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a\nsmall transfer length but large hl/dhvlen values, causing out-of-bounds\nheap reads when the target processes the DH public key (rval + 2*hl) or\nperforms the host response memcmp.\n\nWith DH authentication configured, the OOB pointer is passed directly to\nsg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching\nup to 526 bytes past the buffer. This is exploitable pre-authentication.\n\nAdd bounds validation ensuring sizeof(*data) + 2*hl + dhvlen \u0026lt;= tl before\nany access to the variable-length fields.\n\nDiscovered by Atuin - Automated Vulnerability Discovery Engine.(CVE-2026-64319)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page\n\nnvmet_execute_disc_get_log_page() validates only the dword alignment\nof the host-supplied Log Page Offset (lpo).  The 64-bit offset is then\nadded to a small kzalloc\u0026apos;d buffer that holds the discovery log page\nand the result is passed straight to nvmet_copy_to_sgl(), which\nmemcpy()s data_len bytes out to the host with no source-side bound\ncheck:\n\n    u64 offset      = nvmet_get_log_page_offset(req-\u0026gt;cmd);  /* 64-bit host */\n    size_t data_len = nvmet_get_log_page_len(req-\u0026gt;cmd);     /* 32-bit host */\n    ...\n    if (offset \u0026amp; 0x3) { ... }                               /* only check */\n    ...\n    alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);\n    buffer = kzalloc(alloc_len, GFP_KERNEL);\n    ...\n    status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);\n\nThe Discovery controller is unauthenticated -- nvmet_host_allowed()\nreturns true unconditionally for the discovery subsystem -- so the call\nis reachable pre-authentication by any TCP/RDMA/FC peer that can reach\nthe nvmet target.  With a discovery log page of ~1 KiB, an attacker\nrequesting up to 4 KiB starting at offset == alloc_len reads the next\nslab page out and gets its content returned over the fabric (an\nempirical run on a default nvmet-tcp loopback target leaked 81\ncanonical kernel pointers in one Get Log Page response).  Pointing the\noffset at unmapped kernel memory faults the in-kernel memcpy and\ncrashes (or panics, on panic_on_oops=1) the target host instead.\n\nThe attacker-controlled source-side offset pattern\n\u0026quot;nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)\u0026quot; is unique\nto nvmet_execute_disc_get_log_page in the entire nvmet codebase: every\nother Get Log Page handler in admin-cmd.c either ignores lpo (and\nsilently starts every response at offset 0) or tracks a local\ndestination offset with a fixed source pointer.\n\nValidate the host-supplied offset against the log page size, cap the\ncopy length to what is actually available, and zero-fill any remainder\nof the host transfer buffer.  The zero-fill matches the existing\nshort-response pattern in nvmet_execute_get_log_changed_ns()\n(admin-cmd.c) and prevents leaking transport SGL contents when the\nhost asks for more bytes than the log page contains.(CVE-2026-64320)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nudf: validate sparing table length as an entry count, not a byte count\n\nudf_load_sparable_map() accepts a sparing table when\n\n\tsizeof(*st) + le16_to_cpu(st-\u0026gt;reallocationTableLen) \u0026gt; sb-\u0026gt;s_blocksize\n\nis false, i.e. it treats reallocationTableLen as a number of BYTES that\nmust fit in the block.  But the table is walked as an array of 8-byte\nsparingEntry elements:\n\n\tfor (i = 0; i \u0026lt; le16_to_cpu(st-\u0026gt;reallocationTableLen); i++) {\n\t\tstruct sparingEntry *entry = \u0026amp;st-\u0026gt;mapEntry[i];\n\t\t... entry-\u0026gt;origLocation ...\n\t}\n\nin udf_get_pblock_spar15() and udf_relocate_blocks().  A\nreallocationTableLen of N therefore passes the check whenever\nsizeof(*st) + N \u0026lt;= blocksize, yet the consumers index\nsizeof(*st) + N * sizeof(struct sparingEntry) bytes -- up to ~8x the\nblock.  On a crafted UDF image this is an out-of-bounds read in\nudf_get_pblock_spar15(); udf_relocate_blocks() additionally feeds the\nsame length to udf_update_tag(), whose crc_itu_t() reads far past the\nblock, and its memmove() through st-\u0026gt;mapEntry[] is an out-of-bounds\nwrite.\n\nValidate reallocationTableLen as the entry count it is, with\nstruct_size().(CVE-2026-64322)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nudf: validate VAT header length against the VAT inode size\n\nudf_load_vat() takes the virtual partition\u0026apos;s start offset straight from\nthe on-disk VAT 2.0 header without checking it against the VAT inode\nsize:\n\n\tmap-\u0026gt;s_type_specific.s_virtual.s_start_offset =\n\t\tle16_to_cpu(vat20-\u0026gt;lengthHeader);\n\tmap-\u0026gt;s_type_specific.s_virtual.s_num_entries =\n\t\t(sbi-\u0026gt;s_vat_inode-\u0026gt;i_size -\n\t\t\tmap-\u0026gt;s_type_specific.s_virtual.s_start_offset) \u0026gt;\u0026gt; 2;\n\nlengthHeader is a fully attacker-controlled 16-bit value.  If it exceeds\nthe VAT inode size, the s_num_entries subtraction underflows to a huge\ncount, which defeats the \u0026quot;block \u0026gt; s_num_entries\u0026quot; bound in\nudf_get_pblock_virt15(); and on the ICB-inline path that function reads\n\n\t((__le32 *)(iinfo-\u0026gt;i_data + s_start_offset))[block]\n\nso a large s_start_offset indexes past the inode\u0026apos;s in-ICB data.  Mounting\na crafted UDF image with a virtual (VAT) partition then triggers an\nout-of-bounds read.\n\nReject a VAT whose header length does not leave room for at least one\nentry within the VAT inode.(CVE-2026-64323)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nudf: validate free block extents against the partition length\n\nudf_free_blocks() checks the logical block number and count against the\npartition length, but drops the extent offset from that final bound.  A\ncrafted extent can pass the guard while logicalBlockNum + offset + count\npoints past the partition, which later indexes past the space bitmap\narray.\n\nA single ftruncate(2) on a file backed by such an extent reliably\npanics the kernel.  This is a local availability issue.  On desktop\nsystems where UDisks/polkit allows the active user to mount removable\nUDF media without CAP_SYS_ADMIN, an unprivileged local user can supply\nthe crafted filesystem and trigger the panic by truncating a writable\nfile on it.  Systems that require root or CAP_SYS_ADMIN to mount the\nimage have a higher prerequisite.\n\nNo confidentiality or integrity impact is claimed: the reproduced\nprimitive is an out-of-bounds read of a bitmap pointer slot followed by\na kernel panic.\n\nUse the already computed logicalBlockNum + offset + count value for the\npartition length check.  Also make load_block_bitmap() reject an\nout-of-range block group before indexing s_block_bitmap[], so corrupted\ncallers cannot walk past the flexible array.(CVE-2026-64324)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Reject fragmented frames in devmap\n\nDevmap broadcast redirects clone the packet for all but the last\ndestination.\n\nFor native XDP, that clone path copies only the linear xdp_frame data,\nwhile fragmented frames keep skb_shared_info in tailroom outside the\nlinear area. Cloning such a frame leaves XDP_FLAGS_HAS_FRAGS set but\nwithout valid frag metadata, and the later free path can interpret\nuninitialized tail data as skb_shared_info, leading to an out-of-bounds\naccess during frame return.\n\nReject fragmented native XDP frames in dev_map_enqueue_clone().\n\nAdd the same restriction to the generic XDP clone path in\ndev_map_redirect_clone(). Generic XDP represents fragmented packets as\nnonlinear skbs, and rejecting them here keeps clone-based broadcast\nsupport aligned between native and generic XDP.(CVE-2026-64355)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: multitouch: fix out-of-bounds bit access on mt_io_flags\n\nmt_io_flags is a single unsigned long, but mt_process_slot(),\nmt_release_pending_palms() and mt_release_contacts() use it as a\nper-slot bitmap indexed by the slot number. That slot number is only\nbounded by td-\u0026gt;maxcontacts, which is taken from the device\u0026apos;s\nContactCountMaximum feature report and can be up to 255, not by\nBITS_PER_LONG.\n\nAs a result, a multitouch device that advertises a large contact count\nmakes set_bit()/clear_bit() operate past the mt_io_flags word and\ncorrupt the adjacent members of struct mt_device. The sticky-fingers\nrelease timer is the easiest way to reach this. mt_release_contacts()\nruns\n\n\tfor (i = 0; i \u0026lt; mt-\u0026gt;num_slots; i++)\n\t\tclear_bit(i, \u0026amp;td-\u0026gt;mt_io_flags);\n\nwith num_slots == maxcontacts. For maxcontacts around 250 the loop\nclears the bits that overlap td-\u0026gt;applications.next, zeroing that list\nhead, and the list_for_each_entry() that immediately follows then\ndereferences NULL. The kernel panics from timer (softirq) context. On a\nKASAN build this shows up as a general protection fault in\nmt_release_contacts() with a null-ptr-deref at offset 0x58, which is\noffsetof(struct mt_application, num_received).\n\nThe state is reachable from an untrusted USB or Bluetooth HID\nmultitouch device; no local privileges are required.\n\nStore the per-slot active state in a separately allocated bitmap sized\nfor maxcontacts, the same pattern already used for pending_palm_slots,\nand keep only MT_IO_FLAGS_RUNNING in mt_io_flags. The two\n\u0026quot;mt_io_flags \u0026amp; MT_IO_SLOTS_MASK\u0026quot; arming checks become\nbitmap_empty(td-\u0026gt;active_slots, td-\u0026gt;maxcontacts).\n\nMove MT_IO_FLAGS_RUNNING back to bit 0. It was bumped to bit 32 by the\nsame commit to leave the low byte for the slot bits; with the slot bits\ngone it fits in bit 0 again, which also keeps it within the unsigned\nlong on 32-bit.(CVE-2026-64364)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT\n\nRT migration is done aggressively. When a CPU schedules out a high\npriority RT task for a lower priority task, it will look to see if there\u0026apos;s\nany RT tasks that are waiting to run on another CPU that is of higher\npriority than the task this CPU is about to run. If it finds one, it will\npull that task over to the CPU and allow it to run there instead.\n\nNormally, this pulling is done by looking at the RT overloaded mask (rto)\nwhich contains all the CPUs in the scheduler domain with RT tasks that are\nwaiting to run due to a higher priority RT task currently running on their\nCPU. The CPU that is about to schedule a lower priority task will grab the\nrq lock of the overloaded CPU and move the RT task from that CPU\u0026apos;s runqueue\nto the local one and schedule the higher priority RT task.\n\nThis caused issues when a lot of CPUs would schedule a lower priority task\nat the same time. They would all try to grab the same runqueue lock of\nthe CPU with the overloaded RT tasks. Only the first CPU that got in will\nget that task. All the others would wait until they got the runqueue lock\nand see there\u0026apos;s nothing to pull and do nothing. On systems with lots of\nCPUs, this caused a large latency (up to 500us) which is beyond what\nPREEMPT_RT is to allow.\n\nThe solution to that was to create an RT_PUSH_IPI logic. When any CPU\nwanted to pull a task, instead of grabbing the runqueue lock of the\noverloaded CPU, it would start by sending an IPI to the overloaded CPU,\nand that IPI handler would have the CPU with the waiting RT task do a push\ninstead. Then that handler would send an IPI to the next CPU with\noverloaded RT tasks, and so on. Note, after the first CPU starts this\nprocess, if another CPU wanted to do a pull, it would see that the process\nhas already begun and would only increment a counter to have the IPIs\ncontinue again.\n\nThe RT_PUSH_IPI solved the latency problem with PREEMPT_RT but could cause\na new issue with non PREEMPT_RT. Namely, softirqs run in a threaded\ncontext on PREEMPT_RT but they can run in an interrupt context in non-RT.\n\nIf an IPI lands on a CPU that has just woken up multiple RT tasks and the\ncurrent CPU is running a non RT or a low priority RT task, instead of\ndoing a push, it would simply do a schedule on that CPU. But if a softirq\nwas also executing on this CPU, the schedule would need to wait until the\nsoftirq finished. Until then, the CPU would still be considered overloaded\nas there are RT tasks still waiting to run on it.\n\nA live lock occurred on a workload that was doing heavy networking traffic\non a large machine where the softirqs would run 500us out of 750us. And it\nwould also be waking up RT tasks, causing the RT pull logic to be\nconstantly executed.\n\nWhen a softirq triggered on a CPU with RT tasks queued but not running\nyet, and the other CPUs would see this CPU as being overloaded, they would\nsend an IPI over to it. The CPU would notice that the waiting RT tasks are\nof higher priority than the currently running task and simply schedule\nthat CPU instead. But because the softirq was executing, before it could\nschedule, it would receive another IPI to do the same. The amount of IPIs\nwould slow down the currently running softirq so much that before it could\nreturn back to task context, it would execute another softirq never\nallowing the CPU to schedule. This live locked that CPU.\n\nAs RT_PUSH_IPI was created to help PREEMPT_RT, make it default off if\nPREEMPT_RT is not enabled.(CVE-2026-64374)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()\n\nWhen a container exits, the following BUG_ON() is occasionally triggered:\n\n==================================================================\n VFS: Busy inodes after unmount of sdb (ext4)\n ------------[ cut here ]------------\n kernel BUG at fs/super.c:695!\n CPU: 3 PID: 6 Comm: containerd-shim Tainted: G OE K 6.6 #1\n pstate: 63400009 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)\n pc : generic_shutdown_super+0xf0/0x100\n lr : generic_shutdown_super+0xf0/0x100\n Call trace:\n  generic_shutdown_super+0xf0/0x100\n  kill_block_super+0x20/0x48\n  ext4_kill_sb+0x28/0x60\n  deactivate_locked_super+0x54/0x130\n  deactivate_super+0x84/0xa0\n  cleanup_mnt+0xa4/0x140\n  __cleanup_mnt+0x18/0x28\n  task_work_run+0x78/0xe0\n  do_notify_resume+0x204/0x240\n==================================================================\n\nThe root cause is a race between cgroup_writeback_umount() and\ninode_switch_wbs()/cleanup_offline_cgwb(). There is a window between\ninode_prepare_wbs_switch() returning true and the subsequent\nwb_queue_isw() call. Following is the process that triggers the issue:\n\n      CPU A (umount)           |          CPU B (writeback)\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n                                 inode_switch_wbs/cleanup_offline_cgwb\n                                  atomic_inc(\u0026amp;isw_nr_in_flight)\n                                  inode_prepare_wbs_switch\n                                   -\u0026gt; passes SB_ACTIVE check\n                                   __iget(inode)\n generic_shutdown_super\n  sb-\u0026gt;s_flags \u0026amp;= ~SB_ACTIVE\n  cgroup_writeback_umount(sb)\n   smp_mb()\n   atomic_read(\u0026amp;isw_nr_in_flight)\n   rcu_barrier()\n    -\u0026gt; no pending RCU callbacks\n   flush_workqueue(isw_wq)\n    -\u0026gt; nothing queued, returns\n  evict_inodes(sb)\n   -\u0026gt; Inode skipped as isw still holds a ref.\n  sop-\u0026gt;put_super(sb)\n   /* destroys percpu counters */\n  -\u0026gt; VFS: Busy inodes after unmount!\n                                  wb_queue_isw()\n                                   queue_work(isw_wq, ...)\n                                  /* later in work function */\n                                  inode_switch_wbs_work_fn\n                                   process_inode_switch_wbs\n                                    iput() -\u0026gt; evict\n                                     percpu_counter_dec() // UAF!\n\nFix this by extending the RCU read-side critical section in\ninode_switch_wbs() and cleanup_offline_cgwb() to cover from\ninode_prepare_wbs_switch() through wb_queue_isw().  Since there is\nno sleep in this window, rcu_read_lock() can be used.  Then add a\nsynchronize_rcu() in cgroup_writeback_umount() before the existing\nrcu_barrier(), so that all in-flight switchers that have passed the\nSB_ACTIVE check have completed queue_work() before flush_workqueue()\nis called.\n\nThe existing rcu_barrier() is intentionally retained so this fix can\nbe backported unchanged to stable kernels (5.10.y, 6.6.y, ...) that\nstill queue switches via queue_rcu_work(). It is a no-op on current\nmainline (since commit e1b849cfa6b6 (\u0026quot;writeback: Avoid contention on\nwb-\u0026gt;list_lock when switching inodes\u0026quot;)) and is removed in a follow-up\npatch.(CVE-2026-64378)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: mask server-provided mode to 07777 in modefromsid\n\nWhen modefromsid is active, parse_dacl() applies the server-provided\nsub_auth[2] value from the NFS mode SID to cf_mode without masking to\n07777. Apply the correct masking, same as in the read path.(CVE-2026-64379)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: harden POSIX SID length parsing\n\nposix_info_sid_size() reads sid[1] to obtain the subauthority count,\nbut its existing boundary check still accepts buffers with only one\nremaining byte. Require two bytes before reading sid[1] so all client\npaths that reuse the helper reject truncated POSIX SIDs safely.(CVE-2026-64380)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix double-free in SMB2_open() replay\n\nA response-bearing attempt can return a replayable error and free its\nresponse buffer. If SMB2_open_init() fails before the next send, cleanup\nretains the previous buffer type and frees that response again.\n\nReset response bookkeeping before each attempt to prevent the stale free.(CVE-2026-64382)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix double-free in SMB2_flush() replay\n\nSMB2_flush() keeps its response buffer bookkeeping across replay\nattempts. If a replayable flush response is received and the retry then\nfails before cifs_send_recv() stores a replacement response, flush_exit\nwill free the stale response pointer a second time.\n\nReinitialize resp_buftype and rsp_iov at the top of the replay loop so\ncleanup only acts on response state produced by the current attempt.\nThis fixes a double-free without changing replay handling for successful\nrequests.(CVE-2026-64383)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix change notify replay double-free\n\nA response-bearing attempt can return a replayable error and free its\nresponse buffer. If SMB2_notify_init() fails before the next send, cleanup\nretains the previous buffer type and frees that response again.\n\nReset response bookkeeping before each attempt to prevent the stale free.(CVE-2026-64384)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix double-free in SMB2_ioctl() replay\n\nA response-bearing attempt can return a replayable error and free its\nresponse buffer. If SMB2_ioctl_init() fails before the next send, cleanup\nretains the previous buffer type and frees that response again.\n\nReset response bookkeeping before each attempt to prevent the stale free.(CVE-2026-64385)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix query_info() replay double-free\n\nA response-bearing attempt can return a replayable error and free its\nresponse buffer. If SMB2_query_info_init() fails before the next send,\ncleanup retains the previous buffer type and frees that response again.\n\nReset response bookkeeping before each attempt to prevent the stale free.(CVE-2026-64386)\n\nIn the Linux kernel, an out-of-bounds read vulnerability exists in the SMB client. smb2_check_message() has a long-standing quirk that accepts a response whose calculated length is one byte larger than the bytes actually received (\u0026quot;server can return one byte more due to implied bcc[0]\u0026quot;). This was introduced to accommodate servers that omit the trailing bcc[0] overlap byte when no data area is present. However, the exemption is applied unconditionally, regardless of whether the command actually carries a data area (has_smb2_data_area[]). When a response with a data area is subject to the +1 exemption, the reported data can extend one byte beyond the bytes actually received, causing the subsequent decoder to read past the end of the receive buffer. This is reachable during NEGOTIATE and SESSION_SETUP, before the session is established. The resulting out-of-bounds reads are visible under KASAN when mounting against a non-conforming server, affecting both the SPNEGO/negTokenInit and the NTLMSSP challenge decoders.(CVE-2026-64448)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nhwrng: virtio: clamp device-reported used.len at copy_data()\n\nrandom_recv_done() stores the device-reported used.len directly into\nvi-\u0026gt;data_avail.  copy_data() then indexes vi-\u0026gt;data[] using\nvi-\u0026gt;data_idx (advanced by previous copy_data() calls) and issues a\nmemcpy() without re-validating either value against the posted\nbuffer size sizeof(vi-\u0026gt;data) (SMP_CACHE_BYTES bytes, typically 32\nor 64).\n\nA malicious or buggy virtio-rng backend can set used.len beyond\nsizeof(vi-\u0026gt;data), steering the memcpy() past the end of the inline\narray into adjacent kmalloc-1k slab bytes.  hwrng_fillfn() mixes\nthose bytes into the guest RNG, and guest root can also observe\nthem directly via /dev/hwrng.\n\nConcrete impact is inside the guest:\n\n - Memory-safety / hardening: any virtio-rng backend that\n   over-reports used.len causes the driver to read past vi-\u0026gt;data\n   into unrelated slab contents.  hwrng_fillfn() is a kernel thread\n   that runs as soon as the device is probed; no guest userspace\n   interaction is required to first-trigger the OOB.\n\n - Cross-boundary leak (confidential-compute threat model): a\n   malicious hypervisor cooperating with a malicious or compromised\n   guest root userspace can use /dev/hwrng as a leak channel for\n   guest-kernel heap data.  The host sets a large used.len, guest\n   root reads /dev/hwrng, and the returned bytes contain guest\n   kernel slab contents that were adjacent to vi-\u0026gt;data.  In\n   practice, confidential-compute guests (SEV-SNP, TDX) usually\n   disable virtio-rng entirely, so this path is narrow, but the\n   fix is still worth carrying because the underlying\n   memory-safety bug contaminates the guest RNG on any host.\n\nKASAN confirms the OOB on a 7.1-rc4 guest whose virtio-rng backend\nhas been patched to report used.len = 0x10000:\n\n  BUG: KASAN: slab-out-of-bounds in virtio_read+0x394/0x5d0\n  Read of size 64 at addr ffff88800ae0ba20 by task hwrng/52\n  Call Trace:\n   __asan_memcpy+0x23/0x60\n   virtio_read+0x394/0x5d0\n   hwrng_fillfn+0xb2/0x470\n   kthread+0x2cc/0x3a0\n  Allocated by task 1:\n   probe_common+0xa5/0x660\n   virtio_dev_probe+0x549/0xbc0\n  The buggy address belongs to the object at ffff88800ae0b800\n   which belongs to the cache kmalloc-1k of size 1024\n  The buggy address is located 0 bytes to the right of\n   allocated 544-byte region [ffff88800ae0b800, ffff88800ae0ba20)\n\nSame class of bug as commit c04db81cd028 (\u0026quot;net/9p: Fix buffer\noverflow in USB transport layer\u0026quot;), which hardened\nusb9pfs_rx_complete() against unchecked device-reported length in\nthe USB 9p transport.\n\nWith the clamp at point of use and array_index_nospec() in place,\nthe same harness boots cleanly: copy_data() returns zero for the\nbogus report, the device-supplied bytes after data_idx are\ndiscarded, and the driver issues a fresh request.(CVE-2026-64456)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda/cs35l41: Fix firmware load work teardown\n\ncs35l41_hda creates ALSA controls whose private data points at the\ncs35l41_hda object. The firmware load control can also queue\nfw_load_work.\n\nThose controls are not removed on component unbind, and device remove\nonly cancels fw_load_work through cs35l41_remove_dsp(). That helper is\nskipped when halo_initialized is false. With firmware_autostart\ndisabled, a firmware load can be requested before the DSP has been\ninitialized. If the component or device is removed before the queued\nwork runs, the worker can run after teardown and dereference driver\nstate that is no longer valid.\n\nTrack the created controls and remove them on unbind so no new control\ncallback can reach the driver data or queue more work. Then cancel\nfw_load_work to drain any request that was already queued. Also cancel\nthe work unconditionally during device remove before runtime PM teardown.(CVE-2026-64481)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niio: event: Fix event FIFO reset race\n\n`iio_event_getfd()` creates the event file descriptor with\n`anon_inode_getfd()`, which allocates a new fd, creates the anonymous\nfile and installs it in the process fd table before returning to the\ncaller.\n\nThe IIO code resets the event FIFO after `anon_inode_getfd()` has returned,\nbut before `IIO_GET_EVENT_FD_IOCTL` has copied the fd number to userspace.\nBut since fd tables are shared between threads, another thread can guess\nthe newly allocated fd number and issue a `read()` on it as soon as the fd\nhas been installed.\n\nThis means the `kfifo_to_user()` in `iio_event_chrdev_read()` can run in\nparallel with the `kfifo_reset_out()` in `iio_event_getfd()`.\n\nThe kfifo documentation says that `kfifo_reset_out()` is only safe when it\nis called from the reader thread and there is only one concurrent reader.\nOtherwise it is dangerous and must be handled in the same way as\n`kfifo_reset()`.\n\nIf that happens, `kfifo_to_user()` can advance the FIFO `out` index based\non state from before the reset, after the reset has already moved the `out`\nindex to the current `in` index. That can leave the FIFO with an `out`\nindex past the `in` index. A later `read()` can then see an underflowed\nFIFO length and copy more data than the event FIFO buffer contains. This\ncan result in an out-of-bounds read and leak adjacent kernel memory to\nuserspace.\n\nMove the FIFO reset before `anon_inode_getfd()`. At that point the event fd is\nmarked busy, but the new fd has not been installed yet, so userspace cannot\naccess it while the FIFO is reset.(CVE-2026-64496)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: reject oversized nested action attrs\n\nOpen vSwitch stores generated flow actions as nlattrs, whose nla_len\nfield is u16. Commit a1e64addf3ff (\u0026quot;net: openvswitch: remove\nmisbehaving actions length check\u0026quot;) allowed the total sw_flow_actions\nstream to grow beyond 64 KiB, which is valid, but also removed the last\nguard preventing a generated nested action attribute from exceeding\nU16_MAX.\n\nAn oversized generated container can thus be closed with a truncated\nnla_len. A later dump or teardown then walks a structurally different\nstream than the one that was validated. In particular, an oversized\nnested CLONE/CT action may cause subsequent bytes in the generated\nstream to be interpreted as independent actions.\n\nKeep the larger total-action-stream behavior, but make nested action\nclose reject generated containers that do not fit in nla_len, and return\nthe error through all callers. For recursive SAMPLE, CLONE, DEC_TTL, and\nCHECK_PKT_LEN builders, trim resource-owning action-list tails in reverse\nconstruction order before discarding failed wrappers, so resources copied\ninto the rejected tails are released before the wrappers are removed.\n\nMost failed outer wrappers are discarded by truncating actions_len after\nchild resources have been released. CHECK_PKT_LEN also trims its parent\nafter branch resources are gone. SET/TUNNEL close failures unwind their\nknown tun_dst ownership directly, and SET_TO_MASKED has no external\nownership and truncates on close failure.(CVE-2026-64531)\n\nIn the Linux kernel, the following vulnerability has been resolved:\\n\\nperf/core: Detach event groups during remove_on_exec\\n\\nperf_event_remove_on_exec() removes events by calling\\nperf_event_exit_event(). For top-level events, this removes the event from\\nthe context with DETACH_EXIT only.\\n\\nThis can leave inconsistent group state when a removed event is a group\\nleader and the group contains siblings without remove_on_exec. If the group\\nwas active, the surviving siblings can remain active and attached to the\\nremoved leader\u0026apos;s sibling list, but are no longer represented by a valid\\ngroup leader on the PMU context active lists.\\n\\nA later close of the removed leader uses DETACH_GROUP and can promote the\\nstill-active siblings from this stale group state. The next schedule-in can\\nthen add an already-linked active_list entry again, corrupting the PMU\\ncontext active list.\\n\\nWith DEBUG_LIST enabled, this is caught as a list_add double-add in\\nmerge_sched_in().\\n\\nFix this by detaching group relationships when remove_on_exec removes an\\nevent. This preserves the existing task-exit and revoke behavior, while\\nensuring surviving siblings are ungrouped before the removed event leaves\\nthe context.(CVE-2026-64556)\n\nIn the Linux kernel, a use-after-free (UAF) vulnerability exists caused by a non-leader exec() race condition in posix-cpu-timers. When sys_timer_delete() observes the old leader, while de_thread() executes switch_leader() and releases the old leader, a race condition occurs. Specifically, posix_cpu_timer_del() in sys_timer_delete() obtains the old leader via pid_task(), while de_thread() is executing release_task(old_leader) and setting old_leader-\u0026gt;sighand = NULL. When lock_task_sighand() returns NULL, sys_timer_delete() frees the posix timer object. However, if the timer was armed and enqueued in p-\u0026gt;signal (a TGID targeted timer is inherited on exec()), run_posix_cpu_timers() or other timerqueue add/delete operations will access the freed object\u0026apos;s timerqueue node, resulting in a use-after-free. This issue similarly affects posix_cpu_timer_set() and posix_cpu_timer_rearm(). The history of this vulnerability goes back to the early days of posix CPU timers implementation.(CVE-2026-64560)\n\nIn the Linux kernel, the following vulnerability has been resolved:\\n\\nKVM: x86: Check for invalid/obsolete root *after* making MMU pages available\\n\\nCheck for a \\\u0026quot;stale\\\u0026quot; page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages zaps an in-use root, i.e. marks it invalid, then KVM will attempt to map memory into an invalid root. On its own, populating an invalid root is \\\u0026quot;fine\\\u0026quot;, but because child shadow pages inherit their parent\u0026apos;s role, any children created during the map/fetch will be created as invalid pages, thus violating KVM\u0026apos;s invariant that invalid pages are never on the list of active MMU pages.\\n\\nNote, the underlying flaw has existed since KVM first started tracking invalid roots in 2008 (commit 2e53d63acba7, \\\u0026quot;KVM: MMU: ignore zapped root pagetables\\\u0026quot;), but the true badness only came along in 2020 (Linux 5.9) with the invariant that invalid shadow pages can\u0026apos;t be on the list of active pages.\\n\\nNote #2, inheriting role.invalid when creating child shadow pages is also far from ideal; that flaw will be addressed separately.(CVE-2026-64561)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix double-free in SMB2_close() replay\n\nA response-bearing attempt can return a replayable error and free its\nresponse buffer. If SMB2_close_init() fails before the next send, cleanup\nretains the previous buffer type and frees that response again.\n\nReset response bookkeeping before each attempt to prevent the stale free.(CVE-2026-64597)\n\nIn the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation. __ip_vs_get_out_rt() calls skb_ensure_writable() which may reallocate skb-\u0026gt;head, causing the previously obtained IP header pointer to become a dangling pointer, leading to a use-after-free vulnerability.(CVE-2026-68476)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipvs: fix more places with wrong ipv6 transport offsets\n\nSashiko reports for more incorrect IPv6 transport offsets.\n\nThe app code for TCP was assuming IPv4 network header\neven after the ipvsh argument was provided. This can\ncause problems with apps over IPv6. As for the only\nofficial app in the kernel tree (FTP) this problem is\nharmless because we use Netfilter to mangle the FTP\nports and we do not adjust the TCP seq numbers.\n\nAlso, provide correct offset of the ICMPV6 header in\nip_vs_out_icmp_v6() for correct checksum checks when\nthe IPv6 packet has extension headers.(CVE-2026-68477)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipvs: use parsed transport offset in SCTP state lookup\n\nset_sctp_state() reads the SCTP chunk header again in order to drive the\nIPVS SCTP state table. For IPv6 it computes the offset with\nsizeof(struct ipv6hdr), while the surrounding IPVS code uses iph.len from\nip_vs_fill_iph_skb(), where ipv6_find_hdr() has already skipped\nextension headers and found the real transport header.\n\nThis makes the state machine read from the wrong offset for IPv6 SCTP\npackets that carry extension headers. For example, an INIT packet with an\n8-byte destination options header can be scheduled correctly by\nsctp_conn_schedule(), but set_sctp_state() reads the first byte of the\nSCTP verification tag as a DATA chunk type. The connection then moves\nfrom NONE to ESTABLISHED instead of INIT1, gets the longer established\ntimeout, and updates the active/inactive destination counters\nincorrectly. This happens even though the SCTP handshake has not\ncompleted.\n\nUse the parsed transport offset passed down from ip_vs_set_state() for\nthe SCTP chunk-header lookup. For IPv4 and IPv6 packets without\nextension headers this preserves the existing offset.(CVE-2026-72021)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nieee802154: admin-gate legacy LLSEC dump operations\n\nIn net/ieee802154/netlink.c, the legacy IEEE802154_NL family ops table\nbuilds the LLSEC dump entries (LLSEC_LIST_KEY, LLSEC_LIST_DEV,\nLLSEC_LIST_DEVKEY, LLSEC_LIST_SECLEVEL) with IEEE802154_DUMP() which\nsets no .flags, so generic netlink runs them ungated. The modern\nnl802154 family admin-gates the equivalent reads via\nNL802154_CMD_GET_SEC_KEY and friends with .flags = GENL_ADMIN_PERM.\n\nAny local uid that can open AF_NETLINK / NETLINK_GENERIC can resolve\nthe \u0026quot;802.15.4 MAC\u0026quot; family and dump LLSEC_LIST_KEY on any wpan netdev\nthat has an LLSEC key installed; the dump handler writes the raw\n16-byte AES-128 key bytes (IEEE802154_ATTR_LLSEC_KEY_BYTES, copied\nverbatim from struct ieee802154_llsec_key.key) into the reply.\nRecovering the AES key compromises 802.15.4 LLSEC link confidentiality\nand authenticity, since LLSEC uses CCM* and the same key authenticates\nand encrypts frames.\n\nImpact: any local uid with no capabilities can read the raw 16-byte\nAES-128 LLSEC key from the kernel keytable on any wpan netdev that has\nan administrator-installed LLSEC key, by issuing an LLSEC_LIST_KEY\ndump on the legacy IEEE802154_NL generic-netlink family.\n\nIntroduce IEEE802154_DUMP_PRIV() mirroring IEEE802154_DUMP() but\nsetting .flags = GENL_ADMIN_PERM, and use it for the four LLSEC dump\nentries. LIST_PHY and LIST_IFACE retain IEEE802154_DUMP() because the\nmodern nl802154 family exposes their equivalents to unprivileged\nreaders by design (NL802154_CMD_GET_WPAN_PHY and\nNL802154_CMD_GET_INTERFACE carry \u0026quot;can be retrieved by unprivileged\nusers\u0026quot; annotations).(CVE-2026-72049)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nip6gre_changelink() and ip6erspan_changelink() operate on at most two\nnetns, dev_net(dev) and the tunnel link netns t-\u0026gt;net. They differ once\nthe device is created in or moved to a netns other than the one the\nrequest runs in. The rtnl changelink path checks CAP_NET_ADMIN only\nagainst dev_net(dev), so a caller privileged there but not in t-\u0026gt;net can\nrewrite a tunnel that lives in t-\u0026gt;net.\n\nGate both ops on rtnl_dev_link_net_capable() at their top, before any\nattribute is parsed.(CVE-2026-72052)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipip: require CAP_NET_ADMIN in the device netns for changelink\n\nipip_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u0026gt;net. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u0026gt;net can rewrite a tunnel that\nlives in t-\u0026gt;net.\n\nGate ipip_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.(CVE-2026-72053)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink\n\nvti_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u0026gt;net. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u0026gt;net can rewrite a tunnel that\nlives in t-\u0026gt;net.\n\nGate vti_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.(CVE-2026-72054)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: sit: require CAP_NET_ADMIN in the device netns for changelink\n\nipip6_changelink() operates on at most two netns, dev_net(dev) and the\ntunnel link netns t-\u0026gt;net. They differ once the device is created in or\nmoved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u0026gt;net can rewrite a tunnel that\nlives in t-\u0026gt;net.\n\nGate ipip6_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed. sit was the one tunnel type not covered\nby the recent series that added this check to the other changelink()\nhandlers.(CVE-2026-72061)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete\n\nWhen an offloaded MACsec RX SC is deleted, macsec_del_rxsc_ctx() freed\nthe per-SC metadata_dst with metadata_dst_free(), which kfree()s the\nobject unconditionally and ignores the dst reference count. The RX\ndatapath in mlx5e_macsec_offload_handle_rx_skb() looks up the SC under\nrcu_read_lock() via xa_load(), takes a reference with dst_hold() and\nattaches the dst to the skb with skb_dst_set(). A reader that already\nobtained the rx_sc pointer can race with the delete path and operate on\nfreed memory.\n\nFix the owner side by dropping the reference with dst_release() instead\nof freeing unconditionally, and convert the RX datapath to\ndst_hold_safe() so a reader racing the SC delete cannot attach a dst\nwhose last reference was just dropped; only attach it when a reference\nwas actually taken.\n\nmlx5e_macsec_add_rxsc() also published sc_xarray_element via xa_alloc()\nbefore rx_sc-\u0026gt;md_dst was allocated and initialised, so a datapath reader\nthat looked the SC up by fs_id could observe rx_sc with md_dst still\nNULL or, on weakly-ordered architectures, a non-NULL md_dst pointer\nwhose contents were not yet visible. NULL-check the xa_load() result and\nmd_dst on the datapath, and reorder add_rxsc() so the xa_alloc() publish\nhappens only after md_dst is fully initialised; the xarray RCU publish\nthen pairs with the rcu_read_lock()/xa_load() in the datapath.\n\nNote: macsec_del_rxsc_ctx() also kfree()s rx_sc-\u0026gt;sc_xarray_element\nwithout an RCU grace period while the same datapath reads it under\nrcu_read_lock(); that is a separate pre-existing issue left to a\nfollow-up patch.\n\nFound by 0sec automated security-research tooling (https://0sec.ai).(CVE-2026-72072)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndm-log: fix a bitset_size overflow on 32bit machines\n\nCommit c20e36b7631d (\u0026quot;dm log: fix out-of-bounds write due to\nregion_count overflow\u0026quot;) made sure that region_count could fit in an\nunsigned int. But the bitmap memory isn\u0026apos;t allocated based on\nregion_count. It uses bitset_size (a size_t variable). The first step of\ncalculating bitset_size is to set it to region_count, rounded up to a\nmultiple of BITS_PER_LONG. If region_size is less than BITS_PER_LONG\nsmaller than UINT_MAX, it will get rounded up to 2^32. On a 32bit\narchitecture, this will make bitset_size wrap around to 0 and fail,\ndespite region_count being valid.\n\nSince bitset_size gets divided by 8, it can hold any valid region_count.\nIt just needs a special case to handle the rollover. If it is 0, the\nvalue rolled over, and bitset size should be set to the number of bytes\nneeded to hold 2^32 bits.(CVE-2026-72105)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf,fork: wipe -\u0026gt;bpf_storage before bailouts that access it\n\nCurrently, copy_process() can bail out to free_task() before p-\u0026gt;bpf_storage\nhas been initialized, with this call graph (shown here for the\n!CONFIG_MEMCG case):\n\ncopy_process\n  dup_task_struct\n    arch_dup_task_struct\n      [copies the entire task_struct, including -\u0026gt;bpf_storage member]\n  [RLIMIT_NPROC check fails]\n  delayed_free_task\n    free_task\n      bpf_task_storage_free\n        rcu_dereference(task-\u0026gt;bpf_storage)\n        bpf_local_storage_destroy\n\nIn this case, the nascent task\u0026apos;s -\u0026gt;bpf_storage member that\nbpf_local_storage_destroy() operates on is a plain copy of the parent\u0026apos;s\n-\u0026gt;bpf_storage pointer, not a real initialized pointer.\nThis leads to badness (kernel hangs, UAF).\n\nThis is reachable as long as the process calling fork() has been inserted\ninto a task storage map.(CVE-2026-72110)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: handle inline data with a nonzero offset\n\nnvmet_rdma_use_inline_sg() maps the host-controlled inline data offset\ninto the per-command inline scatterlist.  The bounds check admits any\noffset with off + len \u0026lt;= inline_data_size, but the mapping still assumes\nthe data begins in the first inline page:\n\n\tsg-\u0026gt;offset = off;\n\tsg-\u0026gt;length = min_t(int, len, PAGE_SIZE - off);\n\nWhen a port is configured with inline_data_size \u0026gt; PAGE_SIZE (settable up\nto max(SZ_16K, PAGE_SIZE)), an offset in (PAGE_SIZE, inline_data_size]\nmakes \u0026quot;PAGE_SIZE - off\u0026quot; underflow, so sg-\u0026gt;length is set to ~4 GiB and\nthe block backend reads far past the first inline page.  num_pages(len)\nalso ignores the offset, so an in-bounds offset whose [off, off+len)\nspan crosses a page boundary under-counts the scatterlist.\n\nMap the offset properly: split it into a page index and an in-page\noffset, start the scatterlist at that page, and size the page count from\npage_off + len.  Because the request scatterlist may now start at\ninline_sg[page_idx] rather than inline_sg[0], generalize the inline-SGL\nidentity test in nvmet_rdma_release_rsp() to a range test; otherwise the\npersistent inline scatterlist is mistaken for an allocated one and\nnvmet_req_free_sgls() frees an inline page (and warns in\nfree_large_kmalloc()).(CVE-2026-72129)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Make the TPM character devices non-seekable\n\nThe TPM character devices expose a sequential command/response\ninterface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE\nenabled.\n\nAfter a command leaves a response pending, pread(fd, buf, 16, 0x1400)\npasses 0x1400 as *off to tpm_common_read(). The transfer length is\nbounded by response_length, but the offset is used unchecked when\nforming data_buffer + *off. A sufficiently large offset therefore causes\nan out-of-bounds heap read through copy_to_user() and, if the copy\nsucceeds, an out-of-bounds zero-write through the following memset().\n\nPositional I/O does not provide coherent semantics for this interface.\nAn arbitrary pread offset cannot represent how much of a response has\nbeen consumed sequentially. The write callback always stores a command\nat the start of data_buffer, while pwrite() does not update file-\u0026gt;f_pos\nand can leave the sequential read cursor stale.\n\nCall nonseekable_open() from both open handlers. This removes\nFMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to\nfail with -ESPIPE before reaching the TPM callbacks, and explicitly\nmarks the files non-seekable. Normal read() and write() continue to use\nthe existing sequential f_pos cursor, leaving the response state machine\nunchanged.\n\nTested on Linux 6.12 with KASAN and a swtpm TPM2 device:\n\n - sequential partial reads returned the complete response\n - pread() and preadv() with offset 0x1400 returned -ESPIPE\n - pwrite() and pwritev() with offset zero returned -ESPIPE\n - the pending response remained intact after the rejected operations\n - a subsequent normal command/response cycle completed normally\n - no KASAN report was produced.(CVE-2026-72135)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink\n\nxfrmi_changelink() operates on at most two netns, dev_net(dev) and the\ninterface link netns xi-\u0026gt;net. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in xi-\u0026gt;net can rewrite an interface that\nlives in xi-\u0026gt;net.\n\nGate xfrmi_changelink() on rtnl_dev_link_net_capable() at its top,\nbefore any attribute is parsed.(CVE-2026-72136)\n\nIn the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding frame_count. tbnet_poll() assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment. A packet of frame_count frames therefore ends up with frame_count - 1 fragments. tbnet_check_frame() only bounds the peer supplied frame_count to TBNET_RING_SIZE / 4 (64), which is far above MAX_SKB_FRAGS (17 by default). A peer that sends a packet of 19 or more small frames pushes nr_frags past MAX_SKB_FRAGS, so skb_add_rx_frag() writes past skb_shinfo()-\u0026gt;frags[] and corrupts memory after the shared info.(CVE-2026-72157)\n\nIn the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE. If DAX memory is hotplugged into an unoccupied subsection of an early section, section_activate() reuses the unoptimized boot memmap. However, compound_nr_pages() still assumes that vmemmap optimization is in effect and initializes only the reduced number of struct pages. As a result, the remaining tail struct pages are left uninitialized, which can later lead to unexpected behavior or crashes. Fix this by treating early sections as unoptimized when calculating how many struct pages to initialize.(CVE-2026-72172)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Bound-check xdr_buf_to_bvec() stores before writing\n\nxdr_buf_to_bvec() writes a bio_vec into the caller\u0026apos;s array before\ntesting whether that slot is in range, and the head branch performs\nthe store with no check at all. When the caller\u0026apos;s budget is exactly\nused up, the next store lands one element past the end of the array.\nThe overflow label returns count - 1, which masks the surplus store\nbut cannot undo it.\n\nrq_bvec, the array passed by nfsd_vfs_write(), is allocated to\nexactly rq_maxpages entries with no slack. The OOB store can land in\nadjacent slab memory; the bv_len and bv_offset fields written there\nare derived from client-supplied RPC payload sizes.\n\nMove the in-range check ahead of the store in the head, page-loop,\nand tail branches. With the check at the top of each sequence, count\nis incremented only after a successful store, so the overflow label\ncan return count directly.(CVE-2026-72217)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: wait for in-flight TLS handshake callback when cancel loses race\n\nWhen wait_for_completion_interruptible_timeout() in\nsvc_tcp_handshake() returns 0 (timeout) or -ERESTARTSYS (signal) and\ntls_handshake_cancel() then returns false, handshake_complete() has\nwon the cancellation race: it has set HANDSHAKE_F_REQ_COMPLETED and\nis about to invoke svc_tcp_handshake_done(), but the callback\u0026apos;s\nside effects on xpt_flags and on svsk-\u0026gt;sk_handshake_done have not\nyet committed.\n\nThe current code reads xpt_flags immediately to decide whether the\nsession succeeded. Two races result.\n\nIf the callback has executed set_bit(XPT_TLS_SESSION) but not yet\nclear_bit(XPT_HANDSHAKE), svc_tcp_handshake() sees a session,\nenqueues the transport, and returns. svc_xprt_received() then\nclears XPT_BUSY, a worker thread picks the transport up, the\ndispatcher in svc_handle_xprt() observes XPT_HANDSHAKE still set,\nand xpo_handshake is invoked a second time. That svc_tcp_handshake()\ncalls init_completion(\u0026amp;svsk-\u0026gt;sk_handshake_done) while the original\ncallback concurrently calls complete_all() on it, corrupting the\nembedded swait_queue.\n\nIf the callback has set HANDSHAKE_F_REQ_COMPLETED but not yet\nentered svc_tcp_handshake_done(), svc_tcp_handshake() reads\nXPT_TLS_SESSION as clear and tears the connection down even though\nthe handshake is about to succeed.\n\nWait for the callback to commit before inspecting xpt_flags. The\ncompletion is guaranteed to fire because handshake_complete()\ninvokes svc_tcp_handshake_done() unconditionally once it has set\nHANDSHAKE_F_REQ_COMPLETED.(CVE-2026-72221)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: pin svc_xprt across the asynchronous TLS handshake callback\n\nsvc_tcp_handshake() stores the raw svc_xprt pointer in\ntls_handshake_args.ta_data and submits the request through\ntls_server_hello_x509(). The handshake core takes only\nsock_hold(req-\u0026gt;hr_sk); nothing references the embedding struct\nsvc_sock that svc_tcp_handshake_done() reaches via container_of().\n\nTwo close races leave the in-flight callback writing through a freed\nsvc_sock. svc_sock_free() calls tls_handshake_cancel() and discards\nits return value: a false return means handshake_complete() has\nalready set HANDSHAKE_F_REQ_COMPLETED but hp_done() may not have\nfinished, yet svc_sock_free() proceeds to kfree(svsk). The\ncancel-loser fall-through inside svc_tcp_handshake() itself produces\nthe same window: when wait_for_completion_interruptible_timeout()\nreturns \u0026lt;= 0 (timeout or signal) and tls_handshake_cancel() returns\nfalse, the function does not drain, returns, and svc_handle_xprt()\ncalls svc_xprt_received(), which clears XPT_BUSY and can drop the\nlast reference. A concurrent close then runs svc_sock_free() while\nsvc_tcp_handshake_done() is still updating xpt_flags and walking\nsvsk-\u0026gt;sk_handshake_done.\n\nThe corruption surfaces as set_bit/clear_bit RMW into the freed\nxpt_flags slab slot and as complete_all() walking and writing the\nfreed wait_queue_head_t list embedded in sk_handshake_done -- a\nslab-corruption primitive, not a benign read. The path is reachable\non any TLS-enabled NFS server whenever a connection close overlaps\nthe tlshd downcall delivery window; the interruptible wait means\nsignal delivery suffices, not just SVC_HANDSHAKE_TO expiry.\n\nTake svc_xprt_get(xprt) immediately before tls_server_hello_x509()\nso the in-flight callback owns its own reference. Release it on the\ntwo edges where the callback is guaranteed not to fire -- submission\nfailure from tls_server_hello_x509() and a successful\ntls_handshake_cancel() -- and at the tail of\nsvc_tcp_handshake_done() after complete_all().\n\n[cel: rewrote commit message to describe the actual change](CVE-2026-72222)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: retrieve ethhdr after potential skb realloc on RX\n\npskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind\nthe skb. Variables which were pointing to the old buffer need to be\nreassigned to avoid an use-after-free.\n\nThis was done correctly for the VLAN header but missed for the ethernet\nheader which is later used for the TT and AP isolation handling.(CVE-2026-72235)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Move kvm_io_bus_get_dev() locking responsibilities to callers\n\nkvm_io_bus_get_dev() returns a device that is only matched by the\naddress, and nothing else. This can cause a lifetime issue if\nthe matched device is not the expected type, as by the time\nthe caller can introspect the object, it might be gone (the srcu\nlock having been dropped).\n\nGiven that there is only a single user of this helper, the simplest\noption is to move the locking responsibility to the caller, which\ncan keep the srcu lock held for as long as it wants.\n\nNote that this aligns with other kvm_io_bus*() helpers, which\nalready require the srcu lock to be held by the callers.(CVE-2026-72282)\n\nIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check. smb2_ioctl_query_info() validates the PASSTHRU_FSCTL response payload before copying it to userspace. The payload offset and length both come from 32-bit fields. The bounds check currently adds OutputOffset and qi.input_buffer_length directly, so the addition can wrap in 32-bit arithmetic before the result is compared against the response buffer length. A malicious server can use a large OutputOffset and a small OutputCount to make the wrapped sum pass the bounds check. The later copy_to_user() then reads from io_rsp + OutputOffset, outside the response buffer, leading to an out-of-bounds read.(CVE-2026-72310)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndm era: fix NULL pointer dereference in metadata_open()\n\nmetadata_open() returns NULL when kzalloc_obj() fails, but the\ncaller era_ctr() only checks IS_ERR(md).  Since IS_ERR(NULL)\nreturns false, the NULL pointer is treated as a valid result\nand later assigned to era-\u0026gt;md, leading to a NULL pointer\ndereference when the metadata is accessed.\n\nFix this by returning ERR_PTR(-ENOMEM) on allocation failure,\nconsistent with dm-cache-metadata.c, dm-thin-metadata.c, and\ndm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the\nsame pattern.(CVE-2026-72316)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: pin upper rpc_clnt across the TLS connect_worker\n\nThe TLS connect path has a use-after-free: nothing pins the\nupper rpc_clnt across the delayed connect_worker. xs_connect()\nstores task-\u0026gt;tk_client in sock_xprt::clnt as a raw pointer\nand queues the worker; for TLS-secured transports that worker\nis xs_tcp_tls_setup_socket(), which reads several fields out\nof the saved pointer (cl_timeout, cl_program, cl_prog,\ncl_vers, cl_cred, cl_stats) to construct the args for the\ninner handshake rpc_clnt.\n\nThe xprt does not reference the rpc_clnt; the rpc_clnt\nreferences the xprt. xs_destroy() does cancel the\nconnect_worker, but it runs only when the xprt\u0026apos;s refcount\ndrops to zero, which cannot happen until the rpc_clnt\nreleases its cl_xprt reference in rpc_free_client_work().\nWhen a TLS handshake fails fatally (for example, an mTLS\nmount whose client cert does not match the server), the\nconnecting task is woken with -EACCES and exits, the mount\ncaller invokes rpc_shutdown_client(), and the upper rpc_clnt\nis freed before the queued connect_worker fires.\nxs_tcp_tls_setup_socket() then dereferences the freed clnt,\nproducing the refcount_t underflow Michael Nemanov reported.\n\nTake a reference on the upper rpc_clnt in xs_connect() for\nTLS transports via a new rpc_hold_client() helper, and drop\nit in the connect_worker\u0026apos;s exit path with rpc_release_client().\nThe xprt_lock_connect() / xprt_unlock_connect() pairing\nalready serialises xs_connect() with xs_tcp_tls_setup_socket(),\nso the take and release are balanced one-for-one.\n\nThe non-TLS connect worker (xs_tcp_setup_socket) never reads\nsock_xprt::clnt, so leave that path alone and avoid the\nclnt-holds-xprt-holds-clnt cycle that would otherwise prevent\nxprt destruction.(CVE-2026-72317)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncifs: validate DFS referral string offsets\n\nparse_dfs_referrals() validates that the response header and referral\narray fit in the received buffer, but each referral also contains string\noffsets supplied by the server.\n\nThose offsets are used to compute the DfsPath and NetworkAddress string\npointers without checking whether they still point inside the response\nbuffer. A malformed referral can therefore make the computed pointer\nexceed the end of the buffer. The resulting negative max_len is then\npassed to cifs_strndup_from_utf16(), and the non-Unicode path forwards it\nto kstrndup() as a size_t, allowing strnlen() to read out of bounds.\n\nValidate each string offset before deriving the string pointer.(CVE-2026-72318)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipvs: ensure inner headers in ICMP errors are in headroom\n\nSashiko points out that after stripping the outer headers\nwith pskb_pull() we should ensure the inner IP headers\nin ICMP errors from tunnels are present in the skb headroom\nfor functions like ipv4_update_pmtu(), icmp_send() and\nIP_VS_DBG().\n\nAlso, add more checks for the length of the inner headers.(CVE-2026-72319)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/tls: Consume empty data records in tls_sw_read_sock()\n\nA peer may send a zero-length TLS application_data record; TLS 1.3\nexplicitly permits these as a traffic-analysis countermeasure (RFC\n8446, Section 5.1). After decryption such a record has full_len ==\n0. tls_sw_read_sock() hands it to the read_actor, which has no\npayload to consume and returns zero. The loop treats a zero return\nas backpressure (used \u0026lt;= 0), requeues the skb at the head of\nrx_list, and stops. rx_list is serviced head-first on the next\ncall, so the empty record is dequeued, fails the same way, and is\nrequeued again; every later record on the connection is blocked\nbehind it.\n\ntls_sw_recvmsg() does not stall on this: a zero-length data record\ncopies nothing and falls through to consume_skb(). Mirror that in\nthe read_sock() path by recognizing an empty data record before\nthe actor runs, consuming it, and continuing.(CVE-2026-72330)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nqede: fix off-by-one in BD ring consumption on build_skb failure\n\nqede_rx_build_skb() and qede_tpa_rx_build_skb() do not check for a\nNULL return from qede_build_skb(). When it returns NULL under memory\npressure, the functions still consume a BD from the ring before\nreturning NULL. The callers then recycle additional BDs, resulting in\none extra BD being consumed (off-by-one). This desynchronizes the BD\nring, which can corrupt DMA page reference counts and lead to SLUB\nfreelist corruption.\n\nCommit 4e910dbe3650 (\u0026quot;qede: confirm skb is allocated before using\u0026quot;)\nadded a NULL check inside qede_build_skb() to prevent a NULL pointer\ndereference, but did not address the missing NULL checks in the\ncallers, making this off-by-one reachable.\n\nFix this by adding NULL checks for the return value of\nqede_build_skb() in both qede_rx_build_skb() and\nqede_tpa_rx_build_skb(), returning NULL immediately before any BD ring\nmanipulation.(CVE-2026-72339)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix HV VHCA stats agent registration race\n\nmlx5e_hv_vhca_stats_create() registers the stats agent through\nmlx5_hv_vhca_agent_create(). The helper publishes the agent in\nhv_vhca-\u0026gt;agents[type] under agents_lock and immediately schedules an\nasynchronous control invalidation on the HV VHCA workqueue before\nreturning to mlx5e.\n\nThe asynchronous invalidation invokes the control agent\u0026apos;s invalidate\ncallback, which reads the hypervisor control block and forwards the\ncommand to mlx5e_hv_vhca_stats_control(). That callback may either:\n\n  - call cancel_delayed_work_sync(\u0026amp;priv-\u0026gt;stats_agent.work), or\n  - call queue_delayed_work(priv-\u0026gt;wq, \u0026amp;sagent-\u0026gt;work, sagent-\u0026gt;delay).\n\nHowever, the delayed_work and priv-\u0026gt;stats_agent.agent are only\ninitialized after mlx5_hv_vhca_agent_create() returns to mlx5e:\n\n    agent = mlx5_hv_vhca_agent_create(...);   /* publish + invalidate */\n    ...\n    priv-\u0026gt;stats_agent.agent = agent;          /* too late */\n    INIT_DELAYED_WORK(\u0026amp;priv-\u0026gt;stats_agent.work, ...); /* too late */\n\nIf the asynchronous control path runs before the two assignments\nabove, it can:\n\n  - Operate on an uninitialized delayed_work whose timer.function is\n    NULL. queue_delayed_work() calls add_timer() unconditionally, so\n    when the timer expires the timer softirq invokes a NULL function\n    pointer.\n  - Re-initialize the timer later through INIT_DELAYED_WORK() while\n    the timer is already enqueued in the timer wheel, corrupting the\n    hlist (entry.pprev cleared while the previous bucket node still\n    points at this entry).\n  - When the worker eventually runs, mlx5e_hv_vhca_stats_work() reads\n    sagent-\u0026gt;agent (NULL) and dereferences it inside\n    mlx5_hv_vhca_agent_write().\n\nFix this by:\n\n  - Initializing priv-\u0026gt;stats_agent.work before invoking\n    mlx5_hv_vhca_agent_create(), so the work is always in a valid\n    state when the control callback observes it.\n  - Adding a struct mlx5_hv_vhca_agent **ctx_update out-parameter\n    to mlx5_hv_vhca_agent_create(). The helper writes the agent\n    pointer to *ctx_update before publishing into hv_vhca-\u0026gt;agents[]\n    and triggering the agents_update flow, so any callback\n    subsequently invoked from that flow already sees a valid\n    priv-\u0026gt;stats_agent.agent. This avoids having the control\n    callback participate in agent initialization.\n\nWhile at it, access priv-\u0026gt;stats_agent.agent with\nREAD_ONCE()/WRITE_ONCE() for the cross-CPU access with the worker, and\nclear priv-\u0026gt;stats_agent.buf on the agent_create() failure path.(CVE-2026-72342)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nseg6: validate SRH length before reading fixed fields\n\nseg6_validate_srh() reads fixed SRH fields such as srh-\u0026gt;type and\nsrh-\u0026gt;hdrlen before checking that the supplied length covers the fixed\nstruct ipv6_sr_hdr fields.\n\nThe BPF SEG6 encap path reaches this with a BPF program-supplied pointer\nand length: bpf_lwt_push_encap() and the SEG6 local BPF END_B6 and\nEND_B6_ENCAP actions call bpf_push_seg6_encap(), which forwards the\nlength to seg6_validate_srh() with no minimum-size guard.  A 2-byte SEG6\nencap header can therefore make the validator read srh-\u0026gt;type at offset 2\nbeyond the caller-supplied buffer.\n\nReject lengths shorter than the fixed SRH at the top of\nseg6_validate_srh(), before any field is read.  This fixes the BPF helper\npath and keeps the common validator robust.(CVE-2026-72400)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()\n\nResetting all VFs causes resource leak on VFs with FDIR filters\nenabled as CTRL VSIs are only invalidated and not freed. Fix by using\nice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which\naligns behavior with the ice_reset_vf() function.\n\nReproduction:\n  echo 1 \u0026gt; /sys/class/net/$pf/device/sriov_numvfs\n  ethtool -N $vf flow-type ether proto 0x9000 action 0\n  echo 1 \u0026gt; /sys/class/net/$pf/device/reset(CVE-2026-72425)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: validate selector family and prefixlen during match\n\nsyzbot reported a shift-out-of-bounds in xfrm_selector_match()\ndue to AF_UNSPEC selector with large prefixlen (e.g. 128) matched\nagainst IPv4 flow (when XFRM_STATE_AF_UNSPEC is set).\n\nFix this by:\n\n- Rejecting mismatched families in xfrm_selector_match.\n- Returning false in addr4_match if prefixlen \u0026gt; 32.\n- Returning false in addr_match if prefixlen \u0026gt; 128 (prevents overflow).(CVE-2026-72450)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\napparmor: aa_label_alloc use aa_label_free on alloc failure\n\naa_label_alloc() allocates a secid before allocating or taking the label\nproxy. If the later proxy step fails, the error path only freed the label\nmemory, leaking any resources initialized by aa_label_init().\n\nUse aa_label_free() on the failure path so partially initialized labels\nrelease their secid and other label resources before the backing memory is\nfreed.(CVE-2026-72459)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\napparmor: check label build before no_new_privs test\n\naa_change_profile() builds a replacement label with\nfn_label_build_in_scope() before the no_new_privs subset check. The build\nhelper can fail and return NULL or an ERR_PTR, but the result was passed\nto aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL()\ncheck.\n\nReuse the existing target-label build failure handling immediately after\nthe build. This preserves the current audit handling while preventing the\nsubset helper from dereferencing an invalid label.(CVE-2026-72460)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Repost Receive buffers for malformed replies\n\nrpcrdma_wc_receive() decrements the transport\u0026apos;s Receive count for\nevery completion before it dispatches a successful Receive to\nrpcrdma_reply_handler(). The handler must post a replacement\nReceive WR before returning unless ownership of the rep has moved\nelsewhere, as on the backchannel path.\n\nCommit 2ae50ad68cd7 (\u0026quot;xprtrdma: Close window between waking RPC\nsenders and posting Receives\u0026quot;) moved the Receive refill out of\nrpcrdma_wc_receive(), where it had run ahead of every reply, into\nrpcrdma_reply_handler() so that the responder\u0026apos;s credit grant could\nbe parsed before reposting. The bad-version and short-reply exits\nnever reach that refill: they recycle the rep and return without\ncalling rpcrdma_post_recvs().\n\nA remote peer can therefore drain the client\u0026apos;s posted Receive\nqueue by sending a sustained stream of replies that are shorter\nthan the fixed transport header or that carry an unrecognized\nRPC/RDMA version. Each such reply consumes one posted Receive\nwithout replacing it. Once the queue empties, the peer\u0026apos;s next\nSend finds no posted Receive and the transport stalls until\nreconnect.\n\nRoute both malformed-reply exits through the shared repost tail\nafter recycling the rep, refilling against buf-\u0026gt;rb_credits, the\nmost recent accepted credit grant. Neither exit updates the\ncongestion window, so RPCs admitted under the previous grant\nremain in flight awaiting replies. A smaller refill target would\nlet a stream of malformed replies ratchet the posted Receive count\ndown to the batch floor while the congestion window still admits\nrb_credits RPCs; a burst of valid replies to those RPCs could then\noverrun the posted Receives, and because the client connects with\nrnr_retry_count of zero, a single RNR NAK terminates the\nconnection. Refilling against rb_credits also restores the target\nthat applied to malformed replies before commit 2ae50ad68cd7\n(\u0026quot;xprtrdma: Close window between waking RPC senders and posting\nReceives\u0026quot;) when rpcrdma_post_recvs() computed it from rb_credits\ninternally. rb_credits is at least one from connection\nestablishment onward, so the repost path always keeps Receives\nposted.(CVE-2026-72464)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Sanitize the reply credit grant after parsing\n\nThe out_norqst exit in rpcrdma_reply_handler() branches away before\nthe credit clamp, so a reply that matches no pending request reaches\nout_post carrying the raw credit value parsed from the wire.\nrpcrdma_post_recvs() does not bound its @needed argument: the refill\nloop allocates and chains Receive WRs until the count is satisfied or\nallocation fails. A peer that sends a well-formed reply carrying an\nunknown XID and an inflated credit grant therefore drives rep\nallocation and Receive posting past re_max_requests on every such\nreply.\n\nMove the clamp to immediately after the credit field is parsed,\nahead of the first branch that can reach out_post, so every later\nconsumer sees a sanitized value. The cwnd update stays on the\nmatched-request path.(CVE-2026-72465)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Fix bcall rep leak and unbounded peek\n\nrpcrdma_is_bcall() decodes a reply\u0026apos;s first words to decide whether\nthe frame is a backchannel call. Two issues in that decode path\nlet a short or malformed reply leak the receive buffer and drain\nthe Receive queue.\n\nFirst, the speculative peek\n\n    p = xdr_inline_decode(xdr, 0);\n    /* five p++ reads follow */\n\nasks xdr_inline_decode() for zero bytes, which returns xdr-\u0026gt;p\nwithout consulting xdr-\u0026gt;end. The five subsequent __be32 reads can\nthen walk up to 20 bytes past the wire payload into stale regbuf\ncontents and misclassify the reply as a backchannel call.\n\nSecond, after the post-peek\n\n    p = xdr_inline_decode(xdr, 3 * sizeof(*p));\n    if (unlikely(!p))\n            return true;\n\nthe short-header arm returns true without calling\nrpcrdma_bc_receive_call(). The contract with the caller is that a\ntrue return transfers ownership of rep to the backchannel path:\n\n    rpcrdma_reply_handler()\n      if (rpcrdma_is_bcall(r_xprt, rep))\n              return;        /* bare return, skips out_post */\n      ...\n    out_post:\n      rpcrdma_post_recvs(r_xprt, credits + ...);\n\nBecause rpcrdma_bc_receive_call() never ran, no one took rep, but\nrpcrdma_reply_handler still bare-returns past rpcrdma_rep_put()\nand rpcrdma_post_recvs(). The rep, with its persistently\nDMA-mapped receive buffer, is orphaned on rb_all_reps and freed\nonly at transport teardown. This completion reposts nothing, so\nits slot is reclaimed only when a later forward-channel reply\nreaches out_post and rpcrdma_post_recvs() allocates a fresh rep to\nbackfill; absent that traffic the Receive queue drains and the\npeer\u0026apos;s Sends draw RNR NAKs.\n\nFix by consulting xdr-\u0026gt;end after the zero-length peek so the five\n__be32 reads cannot run unless 20 bytes of wire payload remain. A\nbyte-precise comparison against xdr-\u0026gt;end is required because a\nnon-4-aligned receive rounds the stream\u0026apos;s word count up past the\ntrue payload. Also return false from the short-header arm so the\nreply falls through the normal out_norqst cleanup chain\n(rpcrdma_rep_put() plus rpcrdma_post_recvs()).(CVE-2026-72466)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Decouple req recycling from RPC completion\n\nrl_kref formerly served two distinct lifetimes through a single\nrefcount: it gated when a Reply could wake its RPC task, and it\ngated when an rpcrdma_req could return to its free pool. The\nmarshal path took the Send-side reference only when SGEs needed\nDMA-unmap (sc_unmap_count \u0026gt; 0), which made a Send carrying only\npre-registered buffers an exception: the Reply handler dropped\nrl_kref from 1 to 0 and freed the req while the HCA might still\nbe DMA-reading from its send buffer.\n\nGive rl_kref a narrower job. The RPC layer takes one reference\nwhen slot allocation hands a req out. rpcrdma_prepare_send_sges()\ntakes a Send-side reference unconditionally after WR preparation\nsucceeds. xprt_rdma_free_slot() and xprt_rdma_bc_free_rqst() drop\nthe RPC-layer reference; rpcrdma_sendctx_unmap() drops the\nSend-side reference. The req returns to its free pool only after\nboth owners have signed off.\n\nThe existing kref_init(\u0026amp;req-\u0026gt;rl_kref) call in\nrpcrdma_prepare_send_sges() is removed. Initialization moves to\nthe slot-allocation paths (xprt_rdma_alloc_slot and\nrpcrdma_bc_rqst_get), and the release callback re-arms rl_kref\nbefore the req returns to a free pool. A re-init in the marshal\npath would discard the RPC-layer reference that already exists\non entry.\n\nThree invariants follow:\n\n  - Any rpcrdma_req held by an rpc_rqst has rl_kref \u0026gt;= 1.\n    xprt_rdma_alloc_slot(), rpcrdma_bc_rqst_get(), and the\n    backlog-wake branch in xprt_rdma_alloc_slot() each kref_init\n    rl_kref before publishing the req. Without this invariant,\n    an RPC task that aborts between slot allocation and marshal\n    (gss_refresh failure or signal during call_connect, for\n    example) would drive xprt_release() -\u0026gt;\n    xprt_rdma_free_slot() -\u0026gt; kref_put against a refcount of\n    zero, saturating refcount_t and stranding the slot.\n\n  - The Send-side reference is taken only after WR prep\n    succeeds. A mapping failure in rpcrdma_prepare_send_sges()\n    runs rpcrdma_sendctx_cancel(), which DMA-unmaps the sendctx\n    and clears sc_req without touching rl_kref. The sendctx\n    ring walks in rpcrdma_sendctx_put_locked() and\n    rpcrdma_sendctxs_destroy() skip entries with sc_req == NULL,\n    so a burst of -EIO marshal failures cannot hold reqs off\n    rb_send_bufs.\n\n  - The release callback re-arms rl_kref so the next consumer\n    enters with the invariant satisfied.\n\nReplies now complete the RPC directly. rpcrdma_reply_handler()\ncalls rpcrdma_complete_rqst() in place of kref_put on the\nnon-LocalInv branch. The LocalInv branch already completes the\nRPC from frwr_unmap_async() and is unaffected.\n\nBecause Send-side references can now outlive RPC completion,\nconnection teardown drains sendctx entries whose unsignaled\nSends never had a later signaled completion to walk the ring.\nrpcrdma_sendctxs_destroy() walks the active range and runs\nrpcrdma_sendctx_unmap() on each entry with a non-NULL sc_req\nbefore the request buffers are reset, and is moved ahead of\nrpcrdma_reqs_reset() in rpcrdma_xprt_disconnect() so the reqs\nare still in their pre-reset state when the Send-side refs are\nreleased.\n\nThe drain creates a teardown-ordering hazard on the backchannel\npath. With the new lifetime, releasing a bc_prealloc req from\nrpcrdma_req_release() re-adds it to bc_pa_list. The disconnect\nin xprt_rdma_destroy() runs after xprt_destroy_backchannel() has\nalready emptied bc_pa_list, so the drained reqs would otherwise\nleak. xprt_rdma_destroy() now runs xprt_rdma_bc_destroy(xprt, 0)\na second time after the disconnect to reclaim them.(CVE-2026-72473)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: add bounds check to run_get_highest_vcn()\n\nrun_get_highest_vcn() parses a packed NTFS mapping-pairs buffer without\nany length bound, relying solely on a 0x00 terminator to stop.  A\ncrafted $LogFile UpdateMappingPairs record whose embedded attribute\ncontains mapping-pairs runs without a terminator causes the function to\nread past the slab allocation, triggering a KASAN slab-out-of-bounds\nread on mount.\n\nThe sibling function run_unpack() received an analogous bounds-check in\ncommit b62567bca474 (\u0026quot;ntfs3: add buffer boundary checks to run_unpack()\u0026quot;),\nbut run_get_highest_vcn() was missed.\n\nTake a run_buf_size parameter and reject any run header whose payload\nwould extend past the buffer end, mirroring the pattern used by\nrun_unpack().  The caller in fslog.c passes the remaining attribute\nbytes after the mapping-pairs offset.\n\nKASAN report (on mainline v7.1 merge window HEAD):\n\n  BUG: KASAN: slab-out-of-bounds in run_get_highest_vcn+0x3c0/0x410\n  Read of size 1 at addr ffff88800e2d5400 by task mount/72\n  Call Trace:\n   run_get_highest_vcn+0x3c0/0x410\n   do_action.isra.0+0x3ba8/0x7b50\n   log_replay+0x9ddd/0x10200\n   ntfs_loadlog_and_replay+0x4ad/0x610\n   ntfs_fill_super+0x214a/0x4540(CVE-2026-72478)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Guard __get_user acesss with access_ok for uprobe_multi data\n\nAs reported by sashiko [1] we need to use access_ok to check the user\nspace data bounds before we use __get-user to get it.\n\n[1] https://lore.kernel.org/bpf/(CVE-2026-74258)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: core: fix supplied_from allocations\n\nIf dts property power-supplies has multiple values, then accessing to\npsy-\u0026gt;supplied_from[i-1] in __power_supply_populate_supplied_from will\noverrun supplied_from array.(CVE-2026-74271)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntipc: require net admin for TIPCv2 netlink mutators\n\nTIPCv2 registers mutating generic-netlink operations without admin\npermission flags. Generic netlink only checks CAP_NET_ADMIN when an\noperation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local\nunprivileged process can currently change TIPC state through commands\nsuch as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and\nbearer enable/disable.\n\nThe legacy TIPC netlink API already checks netlink_net_capable(...,\nCAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators\nthe equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which\nmaps to the same namespace-aware CAP_NET_ADMIN check that\nnetlink_net_capable() performs, so the behaviour matches the legacy\npath and keeps working for CAP_NET_ADMIN holders in a non-initial user\nnamespace (containers).\n\nA QEMU/KASAN repro run as uid/gid 65534 with zero effective\ncapabilities previously succeeded in changing the network id and node\nidentity, setting and flushing key material, and enabling/disabling a\nUDP bearer. With this patch applied the same operations fail with\n-EPERM.(CVE-2026-74283)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate embedded address parameter length\n\nsctp_verify_asconf() and sctp_verify_param() only validate ADD_IP, DEL_IP,\nand SET_PRIMARY parameters against a fixed minimum size of sizeof(struct\nsctp_addip_param) + sizeof(struct sctp_paramhdr). This ensures the outer\nparameter is large enough to contain an embedded address parameter header,\nbut does not verify that the embedded address parameter\u0026apos;s declared length\nfits within the bounds of the outer parameter.\n\nLater, sctp_process_param() and sctp_process_asconf_param() extract the\nembedded address parameter and pass it to af-\u0026gt;from_addr_param(), which uses\nthe address parameter length to parse the variable-length address payload.\nA malformed peer can therefore advertise an embedded address parameter\nlength that exceeds the remaining bytes in the enclosing parameter.\n\nValidate that addr_param-\u0026gt;p.length does not exceed the space available\nafter the sctp_addip_param header before processing the embedded address\nparameter. Reject malformed parameters when the embedded address length\nextends beyond the enclosing parameter bounds.\n\nThis prevents out-of-bounds reads when parsing malformed parameters carried\nin INIT or ASCONF processing paths.(CVE-2026-74287)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Tighten cgroup storage cookie checks for prog arrays\n\nThe fix in commit abad3d0bad72 (\u0026quot;bpf: Fix oob access in cgroup local\nstorage\u0026quot;) is still incomplete. The prog-array compatibility check\ntreats a program with no cgroup storage as compatible with any stored\nstorage cookie. This allows a storage-less program to bridge a tail\ncall chain between an entry program and a storage-using callee even\nthough cgroup local storage at runtime still follows the caller\u0026apos;s\ncontext, that is, A -\u0026gt; B(no storage) -\u0026gt; C(storage) path.\n\nRequiring exact cookie equality would break the legitimate case of a\nstorage-less leaf program being tail called from a storage-using one.\nInstead, only accept a zero storage cookie if the program cannot\nperform tail calls itself. This keeps A -\u0026gt; B(no storage) working\nwhile rejecting the A -\u0026gt; B(no storage) -\u0026gt; C(storage) bridge.(CVE-2026-74305)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Reject sleepable BPF_LSM_CGROUP programs at load time\n\nThe cgroup shim runs under rcu_read_lock_dont_migrate(), so we should\nnot attach any sleepable BPF programs there. Add support to the verifier\nto explicitly reject attempts to load sleepable BPF programs destined\nfor LSM cgroup attachment.\n\nWithout this, we get the following splat from a BPF_LSM_CGROUP\nprogram marked BPF_F_SLEEPABLE attached to file_open when it calls\nbpf_get_dentry_xattr():\n\n  BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1567\n  in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 34317, name: load\n  preempt_count: 0, expected: 0\n  RCU nest depth: 2, expected: 0\n  Call Trace:\n   down_read+0x76/0x480\n   ext4_xattr_get+0x11f/0x700\n   __vfs_getxattr+0xf0/0x150\n   bpf_get_dentry_xattr+0xbb/0xf0\n   bpf_prog_e76a298dac9218c6_test_open+0x6a/0x85\n   __cgroup_bpf_run_lsm_current+0x326/0x840\n   bpf_trampoline_6442534646+0x62/0x14d\n   security_file_open+0x34/0x60\n   do_dentry_open+0x340/0x1260\n   vfs_open+0x7a/0x440\n   path_openat+0x1bac/0x30a0\n\nlibbpf provides a .s named section variant for every sleepable\nprogram type except lsm_cgroup, reflecting that per-cgroup LSM programs\nare intended to only run in a non-sleepable context.\n\nThe above splat was obtained by bypassing libbpf by using bpf(2)\ndirectly.(CVE-2026-74338)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Clear rb node linkage when freeing bpf_rb_root\n\nbpf_rb_root_free() detaches the root by copying the current rb_root_cached\nand then replacing the live root with RB_ROOT_CACHED. It then walks the\ncopied root and drops each object contained in the tree.\n\nThis leaves the rb node state intact while dropping the object. If the\nobject is refcounted and survives the drop, its bpf_rb_node_kern still\ncontains an owner pointer to the freed root and stale rb tree linkage. If\na later bpf_rb_root allocation reuses the same address, bpf_rbtree_remove()\ncan incorrectly pass the owner check and call rb_erase_cached() on a node\nwhose rb pointers belong to the old tree.\n\nMirror the list draining behavior by marking nodes as busy while the root\nis being detached, then clear the rb node and release the owner before\ndropping the containing object. This makes surviving nodes unowned and\nsafe to reject from remove or accept for a later add.(CVE-2026-74344)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix UAF by restoring RCU-delayed inode freeing in bpffs\n\ncommit 4f375ade6aa9 (\u0026quot;bpf: Avoid RCU context warning when unpinning\nhtab with internal structs\u0026quot;) moved inode cleanup from -\u0026gt;free_inode()\ninto -\u0026gt;destroy_inode() to avoid sleeping in RCU context when calling\nbpf_any_put(). However this removed the RCU delay on freeing the\ninode itself and the cached symlink body (i_link), both of which\ncan be accessed by RCU pathwalk (pick_link, may_lookup etc.).\n\nThis causes a use-after-free when a concurrent unlinkat() drops the\nlast inode reference and destroy_inode() frees the inode immediately,\nwhile another task is still walking the path in RCU mode and reads\ninode-\u0026gt;i_opflags (offset +2) inside current_time() -\u0026gt; is_mgtime().\n\nKASAN reports:\n  BUG: KASAN: slab-use-after-free in is_mgtime include/linux/fs.h:2313\n  Read of size 2 at addr ffff8880407e4282 (offset +2 = i_opflags)\n\nThe rules (per Al Viro):\n  -\u0026gt;destroy_inode()  called immediately, can sleep, use for blocking\n                     cleanup e.g. bpf_any_put()\n  -\u0026gt;free_inode()     called after RCU grace period, use for freeing\n                     inode and anything RCU-accessible e.g. i_link\n\nFix: split the two concerns properly:\n  - keep bpf_any_put() in bpf_destroy_inode() since it is blocking\n    and needs to run promptly\n  - introduce bpf_free_inode() to handle kfree(i_link) and\n    free_inode_nonrcu() with proper RCU delay, preventing the UAF(CVE-2026-74363)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Copy WQE to local buffer in non-SRQ receive path\n\nFor non-SRQ QPs, the responder reads WQE fields directly from the\nshared queue buffer mapped into userspace. This allows a malicious\nuser to modify fields like num_sge or sge entries while the kernel\nis processing the WQE, leading to out-of-bounds reads in\nrxe_resp_check_length() and copy_data().\n\nIntroduce get_recv_wqe() that validates num_sge and copies the WQE\nto a kernel-local buffer before processing, matching the approach\nalready used for SRQ WQEs in get_srq_wqe(). The srq_wqe buffer is\nreused since SRQ and non-SRQ paths are mutually exclusive per QP.(CVE-2026-74377)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe\n\nget_srq_wqe() reads wqe-\u0026gt;dma.num_sge from the shared receive queue\nbuffer, which is mapped into userspace. It validates num_sge against\nmax_sge, but then re-reads the same field to calculate the memcpy\nsize. A concurrent userspace thread can modify num_sge between\nvalidation and use, causing a heap buffer overflow when copying the\nWQE into qp-\u0026gt;resp.srq_wqe.\n\nRead num_sge into a local variable and use it for both the bounds\ncheck and the size calculation.(CVE-2026-74378)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/srpt: fix integer overflow in immediate data length check\n\nimm_buf-\u0026gt;len is a user-controlled uint32_t received from the network.\nAdding it to imm_data_offset without overflow checking allows a\nmalicious initiator to send len=0xFFFFFFFF, causing req_size to wrap\naround to a small value, bypassing the bounds check, and subsequently\npassing a ~4GB length to sg_init_one().\n\nUse check_add_overflow() to detect wrapping before the comparison.(CVE-2026-74394)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nIB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier\n\nmlx5_ib_alloc_transport_domain() allocates a transport domain and then\nmay fail in mlx5_ib_enable_lb(). In that case, the allocated TD is leaked.\n\nFix this by deallocating the TD when mlx5_ib_enable_lb() returns an\nerror. Also return 0 explicitly in the no-loopback-capability success\nbranch, and move dev-\u0026gt;lb.mutex initialization to mlx5_ib_stage_init_init().(CVE-2026-74397)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD\n\naddrconf_dad_failure() transitions ifp-\u0026gt;state from DAD to POSTDAD\nvia addrconf_dad_end(), which drops ifp-\u0026gt;lock on return.  The lock\nis re-acquired after net_info_ratelimited().  A concurrent\nipv6_del_addr() can take the lock in that window, set ifp-\u0026gt;state\nto DEAD and run list_del_rcu(\u0026amp;ifp-\u0026gt;if_list).\n\naddrconf_dad_failure() then overwrites DEAD with ERRDAD at errdad:\nand schedules a new dad_work.  The work calls ipv6_del_addr()\nagain, hitting the already-poisoned list entry:\n\n  general protection fault: 0000 [#1] SMP NOPTI\n  CPU: 4 PID: 217 Comm: kworker/4:1\n  Workqueue: ipv6_addrconf addrconf_dad_work\n  RIP: 0010:ipv6_del_addr+0xe9/0x280\n  RAX: dead000000000122\n  Call Trace:\n   addrconf_dad_stop+0x113/0x140\n   addrconf_dad_work+0x28c/0x430\n   process_one_work+0x1eb/0x3b0\n   worker_thread+0x4d/0x400\n   kthread+0x104/0x140\n   ret_from_fork+0x35/0x40\n\nFold the addrconf_dad_end() logic into addrconf_dad_failure() under\na single ifp-\u0026gt;lock critical section.  The STABLE_PRIVACY branch\ntemporarily drops ifp-\u0026gt;lock around address regeneration, so at\nlock_errdad: verify the state is still POSTDAD before transitioning\nto ERRDAD; bail out otherwise to avoid overwriting a state set by\nanother path while the lock was released.(CVE-2026-74398)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().\n\nudp_tunnel_sock_release() could set sk-\u0026gt;sk_user_data to NULL\nwhile vxlan_gro_prepare_receive() is running.\n\nLet\u0026apos;s check if rcu_dereference_sk_user_data() is NULL after\nskb_gro_remcsum_init().(CVE-2026-74406)","status":"published","published":"2026-09-05T15:04:08Z","modified":"2026-09-05T15:16:48.225761008Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"UBUNTU-CVE-2026-72135","description":"In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/response interface, but their open handlers leave FMODE_PREAD and FMODE_PWRITE enabled. After a command leaves a response pending, pread(fd, buf, 16, 0x1400) passes 0x1400 as *off to tpm_common_read(). The transfer length is bounded by response_length, but the offset is used unchecked when forming data_buffer + *off. A sufficiently large offset therefore causes an out-of-bounds heap read through copy_to_user() and, if the copy succeeds, an out-of-bounds zero-write through the following memset(). Positional I/O does not provide coherent semantics for this interface. An arbitrary pread offset cannot represent how much of a response has been consumed sequentially. The write callback always stores a command at the start of data_buffer, while pwrite() does not update file-\u003ef_pos and can leave the sequential read cursor stale. Call nonseekable_open() from both open handlers. This removes FMODE_PREAD and FMODE_PWRITE, causing positional reads and writes to fail with -ESPIPE before reaching the TPM callbacks, and explicitly marks the files non-seekable. Normal read() and write() continue to use the existing sequential f_pos cursor, leaving the response state machine unchanged. Tested on Linux 6.12 with KASAN and a swtpm TPM2 device:  - sequential partial reads returned the complete response  - pread() and preadv() with offset 0x1400 returned -ESPIPE  - pwrite() and pwritev() with offset zero returned -ESPIPE  - the pending response remained intact after the rejected operations  - a subsequent normal command/response cycle completed normally  - no KASAN report was produced.","status":"published","published":"2026-08-15T06:21:00Z","modified":"2026-11-10T02:51:20.580076378Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-10T03:20:08.580565Z"},{"id":"SUSE-SU-2026:24181-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc (\"Disable CONFIG_BATMAN_ADV (jsc#PED-16892)\").\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T15:51:36Z","modified":"2026-10-20T17:23:58.081294417Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24182-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T14:42:54Z","modified":"2026-10-20T17:23:58.082704471Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24315-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc (\"Disable CONFIG_BATMAN_ADV (jsc#PED-16892)\").\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T16:13:17Z","modified":"2026-10-27T17:23:13.4159637Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24316-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T16:39:36Z","modified":"2026-10-27T17:23:13.475564625Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4279-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2023-53109: net: tunnels: annotate lockless accesses to dev-\u003eneeded_headroom (bsc#1242405 bsc#1275784).\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).\n- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).\n- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n\nThe following non security issues were fixed:\n\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- perf: Reject exited events as group leaders (git-fixes).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- RDMA/siw: Introduce siw_cep_set_free_and_put (git-fixes).\n- RDMA/siw: Introduce siw_destroy_cep_sock (git-fixes).\n- RDMA/siw: Introduce siw_free_cm_id (git-fixes).\n- RDMA/siw: Only check attrs-\u003ecap.max_send_wr in siw_create_qp (git-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n","status":"published","published":"2026-09-22T08:32:05Z","modified":"2026-09-23T09:15:06.101877069Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4282-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).\n- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).\n- CVE-2026-43134: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (bsc#1264308).\n- CVE-2026-43257: media: cx88: Add missing unmap in snd_cx88_hw_params() (bsc#1264296).\n- CVE-2026-43277: ACPI / APEI: Make GHES estatus header validation more user friendly (bsc#1264594).\n- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).\n- CVE-2026-43416: powerpc, perf: Check that current-\u003emm is alive before getting user callchain (bsc#1265121).\n- CVE-2026-45941: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (bsc#1266920).\n- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).\n- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).\n- CVE-2026-46108: ipmi:si: Return state to normal if message allocation fails (bsc#1267615).\n- CVE-2026-46128: ipmi: Check event message buffer response for bad data (bsc#1267643).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).\n- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).\n- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).\n- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).\n- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).\n- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).\n- CVE-2026-53091: net: do not use skb_mac_header() in qdisc_pkt_len_init() (bsc#1269530).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).\n- CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).\n- CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).\n- CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).\n- CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).\n- CVE-2026-53403: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in (bsc#1271731).\n- CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).\n- CVE-2026-63823: security: don't use RCU accessors for cred-\u003esession_keyring (bsc#1272182).\n- CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).\n- CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63962: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (bsc#1272482).\n- CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).\n- CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64088: batman-adv: tt: fix negative tt_buff_len (bsc#1273463).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).\n- CVE-2026-64178: Bluetooth: bnep: Fix UAF read of dev-\u003ename (bsc#1273946).\n- CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64306: crypto: drbg - Fix returning success on failure in CTR_DRBG (bsc#1273939).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64313: crypto: ecc - Fix carry overflow in vli multiplication (bsc#1273940).\n- CVE-2026-64315: printk: add print_hex_dump_devel() (bsc#1274028).\n- CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).\n- CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).\n- CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).\n- CVE-2026-64332: USB: ulpi: fix memory leak on registration failure (bsc#1273285).\n- CVE-2026-64333: USB: serial: digi_acceleport: fix write buffer corruption (bsc#1273933).\n- CVE-2026-64334: USB: serial: digi_acceleport: fix hard lockup on disconnect (bsc#1273942).\n- CVE-2026-64340: USB: legousbtower: fix use-after-free on disconnect race (bsc#1274003).\n- CVE-2026-64341: USB: iowarrior: fix use-after-free on disconnect race (bsc#1273895).\n- CVE-2026-64343: USB: ldusb: fix use-after-free on disconnect race (bsc#1273974).\n- CVE-2026-64344: USB: idmouse: simplify disconnect handling (bsc#1274019).\n- CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).\n- CVE-2026-64408: Bluetooth: bnep: pin L2CAP connection during netdev registration (bsc#1273778).\n- CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).\n- CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).\n- CVE-2026-64470: Bluetooth: btusb: fix use-after-free on marvell probe failure (bsc#1273892).\n- CVE-2026-64471: Bluetooth: btusb: fix use-after-free on registration failure (bsc#1274278).\n- CVE-2026-64512: ACPI: CPPC: Suppress UBSAN warning caused by field misuse (bsc#1273597).\n- CVE-2026-64513: KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1273327).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64544: crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (bsc#1273316).\n- CVE-2026-64547: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (bsc#1273319).\n- CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).\n- CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).\n- CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).\n- CVE-2026-68093: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (bsc#1274725).\n- CVE-2026-68111: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1274873).\n- CVE-2026-68117: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (bsc#1274881).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68123: net: openvswitch: don't call pad_packet if not necessary (bsc#1275169).\n- CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).\n- CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).\n- CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68156: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (bsc#1275305).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68188: Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1274953).\n- CVE-2026-68197: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (bsc#1274804).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68234: drm/amdgpu: fix bo-\u003epin leaking in amdgpu_bo_create_reserved (bsc#1275650).\n- CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).\n- CVE-2026-68277: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers (bsc#1275125).\n- CVE-2026-68278: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (bsc#1275870).\n- CVE-2026-68279: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers (bsc#1275871).\n- CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).\n- CVE-2026-68289: tipc: keep the skb in rcv queue until the whole data is read (bsc#1275976).\n- CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).\n- CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).\n- CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).\n- CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).\n- CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).\n- CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).\n- CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).\n- CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68349: wifi: carl9170: fix buffer overflow in rx_stream failover path (bsc#1274681).\n- CVE-2026-68351: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (bsc#1274678).\n- CVE-2026-68357: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (bsc#1274737).\n- CVE-2026-68363: wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (bsc#1275164).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68405: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (bsc#1274896).\n- CVE-2026-68410: wifi: libertas: fix memory leak in helper_firmware_cb() (bsc#1274710).\n- CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).\n- CVE-2026-68426: esp: remove the skb from the chain when it's enqueued in cryptd_wq (bsc#1274705).\n- CVE-2026-68428: KVM: x86/mmu: Fix use-after-free on vendor module reload (bsc#1274699).\n- CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).\n- CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).\n- CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Write NULL to *port_nexus_ptr if no ISID (bsc#1275540).\n- CVE-2026-72086: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1277179).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72142: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (bsc#1277522).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72284: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (bsc#1277730).\n- CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74265: net: mana: initialize gdma queue id to INVALID_QUEUE_ID (bsc#1276517).\n- CVE-2026-74271: power: supply: core: Delete two error messages for a failed memory allocation in\n  power_supply_check_supplies() (bsc#1276502).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74279: crypto: cavium/cpt - fix DMA cleanup using wrong loop index (bsc#1276479).\n- CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).\n- CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr-\u003epd (bsc#1277095).\n- CVE-2026-74341: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response (bsc#1277089).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74416: drm/radeon: fix memory leak in radeon_ring_restore() on lock failure (bsc#1276343).\n- CVE-2026-74417: drm/radeon: fix integer overflow in radeon_align_pitch() (bsc#1276363).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74508: Bluetooth: HIDP: reject frames without a transaction header (bsc#1277893).\n- CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).\n- CVE-2026-74519: pinctrl: devicetree: don't free uninitialized dev_name on error path (bsc#1275810).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).\n- CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74582: af_packet: fix raw sockets over 6in4 tunnel (bsc#1275784).\n- CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74673: Input: evdev - fix information leak in evdev_pass_values() (bsc#1277637).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).\n- CVE-2026-80574: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (bsc#1277329).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80609: qede: fix out-of-bounds check for cqe-\u003elen_list (bsc#1278334).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80765: HID: hyperv: validate initial device info bounds (bsc#1279499).\n- CVE-2026-80819: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (bsc#1279607).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n\nThe following non security issues were fixed:\n\n- fcntl: Fix potential deadlock in send_sig{io, urg}() (bsc#1269113).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).\n- s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1270264).\n- s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1270264).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: harden POSIX SID length parsing (bsc#1273557).\n","status":"published","published":"2026-09-22T08:34:06Z","modified":"2026-09-23T09:15:05.361999881Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4284-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2023-53109: net: tunnels: annotate lockless accesses to dev-\u003eneeded_headroom (bsc#1242405 bsc#1275784).\n- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).\n- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).\n- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).\n- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).\n- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n\nThe following non security issues were fixed:\n\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- perf: Reject exited events as group leaders (git-fixes).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- RDMA/siw: Introduce siw_cep_set_free_and_put (git-fixes).\n- RDMA/siw: Introduce siw_destroy_cep_sock (git-fixes).\n- RDMA/siw: Introduce siw_free_cm_id (git-fixes).\n- RDMA/siw: Only check attrs-\u003ecap.max_send_wr in siw_create_qp (git-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966). \n","status":"published","published":"2026-09-22T16:08:09Z","modified":"2026-09-23T09:15:05.597880685Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4347-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).\n- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).\n- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).\n- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n\nThe following non security issues were fixed:\n\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/siw: Introduce siw_cep_set_free_and_put (git-fixes).\n- RDMA/siw: Introduce siw_destroy_cep_sock (git-fixes).\n- RDMA/siw: Introduce siw_free_cm_id (git-fixes).\n- RDMA/siw: Only check attrs-\u003ecap.max_send_wr in siw_create_qp (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n","status":"published","published":"2026-09-24T14:36:21Z","modified":"2026-09-25T09:45:04.066548418Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4369-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).\n- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).\n- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).\n- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).\n- CVE-2026-43147: Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (bsc#1264642).\n- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).\n- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273743).\n- CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272798).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426).\n- CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541).\n- CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539).\n- CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543).\n- CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).\n- CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).\n- CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72221: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (bsc#1275665).\n- CVE-2026-72222: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (bsc#1275669).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72317: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (bsc#1275925).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74516: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (bsc#1275797).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n\nThe following non security issues were fixed:\n\n- ibmvnic: Only record tx completed bytes once per handler (bsc#1274620).\n- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (git-fixes).\n- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes).\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes).\n- net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes).\n- net: mana: Fall back to scattered pages for GDMA queues (git-fixes).\n- net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (git-fixes).\n","status":"published","published":"2026-10-02T12:46:28Z","modified":"2026-10-02T18:42:50.599983491Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4595-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).\n- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).\n- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).\n- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).\n- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).\n- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).\n- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).\n- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).\n- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).\n- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).\n- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).\n- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).\n- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).\n- CVE-2026-64002: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).\n- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).\n- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).\n- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).\n- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).\n- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).\n- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).\n- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).\n- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).\n- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).\n- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).\n- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).\n- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).\n- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).\n- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).\n- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).\n- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).\n- CVE-2026-64563: rhashtable: clear stale iter-\u003ep on table restart (bsc#1273995).\n- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).\n- CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031).\n- CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).\n- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).\n- CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).\n- CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).\n- CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).\n- CVE-2026-68426: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (bsc#1274705).\n- CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).\n- CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).\n- CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).\n- CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155).\n- CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).\n- CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678).\n- CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886).\n- CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).\n- CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).\n- CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).\n- CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).\n- CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).\n- CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).\n- CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782).\n- CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).\n- CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).\n- CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n\nThe following non security issues were fixed:\n\n- mkspec-dtb: Move DTS prefix into package list.\n- mkspec-dtb: Move provides-obsoletes to package list.\n- mkspec-dtb: Put per-architecture package lists into a hash.\n- mkspec-dtb: re-indent.\n- net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes).\n- net: mana: Add handler for sriov configure (bsc#1272756).\n- net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792).\n- net: mana: Route ring-buffer access through offset-based helpers (git-fixes).\n- net: tap: set skb-\u003edev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).\n- PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes).\n- powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752\n  ltc#221290).\n- RDMA/mana_ib: drain QP references after partial table insertion (git-fixes).\n- RDMA/mana_ib: unify QP lookup table (git-fixes).\n- RDMA/siw: Introduce siw_cep_set_free_and_put (git-fixes).\n- RDMA/siw: Introduce siw_destroy_cep_sock (git-fixes).\n- RDMA/siw: Introduce siw_free_cm_id (git-fixes).\n- RDMA/siw: Only check attrs-\u003ecap.max_send_wr in siw_create_qp (git-fixes).\n- scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes).\n- smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).\n- smb: client: require net admin for CIFS SWN netlink (bsc#1273966).\n","status":"published","published":"2026-10-08T14:26:37Z","modified":"2026-10-09T18:15:04.433847245Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4640-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804).\n- CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801).\n- CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a 'STACKTRACE' histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes).\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ('Disable CONFIG_BATMAN_ADV (jsc#PED-16892)').\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes).\n- ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: bound firmware ID by TLV length (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git-fixes).\n- Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix race condition during device registration (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the 'newfangled' __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes).\n- EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968).\n- EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read 'ngpios' as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix '(null)' output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: core: fix adapter registration race (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: s390: pci: Fix aisb calculation (bsc#1277451).\n- KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451).\n- KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451).\n- KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451).\n- KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451).\n- KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451).\n- KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451).\n- KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451).\n- KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451).\n- KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git-fixes).\n- media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852).\n- net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852).\n- net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852).\n- net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- nvme-tcp: fix usage of page_frag_cache (bsc#1267882).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (git-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- USB: make to_usb_driver() use container_of_const() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random 'error beacon valid' messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mce: Add support for physical address valid bit (jsc#PED-16968).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951).\n- x86/tsx: Make tsx_ctrl_state static (bsc#1250951).\n- xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709).\n- xhci: fix lost bounce buffers on TDs spanning several ring segments (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-13T11:52:05Z","modified":"2026-10-14T11:15:08.088253504Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4706-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804).\n- CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801).\n- CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a 'STACKTRACE' histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes).\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ('Disable CONFIG_BATMAN_ADV (jsc#PED-16892)').\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes).\n- ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: bound firmware ID by TLV length (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git-fixes).\n- Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix race condition during device registration (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the 'newfangled' __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes).\n- EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968).\n- EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read 'ngpios' as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix '(null)' output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: core: fix adapter registration race (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: s390: pci: Fix aisb calculation (bsc#1277451).\n- KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451).\n- KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451).\n- KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451).\n- KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451).\n- KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451).\n- KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451).\n- KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451).\n- KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451).\n- KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git-fixes).\n- media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852).\n- net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852).\n- net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852).\n- net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- nvme-tcp: fix usage of page_frag_cache (bsc#1267882).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (git-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- USB: make to_usb_driver() use container_of_const() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random 'error beacon valid' messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mce: Add support for physical address valid bit (jsc#PED-16968).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951).\n- x86/tsx: Make tsx_ctrl_state static (bsc#1250951).\n- xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709).\n- xhci: fix lost bounce buffers on TDs spanning several ring segments (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-16T13:33:59Z","modified":"2026-10-17T10:00:05.985817162Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8875-1","title":"linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities","description":"It was discovered that the i.MX clock driver in the Linux kernel did not\nproperly handle certain memory allocation failure conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2022-3114)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - User-space API (UAPI);\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - Generic PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Reset controller framework;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - KVM subsystem;\n  - Networking core;\n  - Netfilter;\n  - Socket messages infrastructure;\n  - Network sockets;\n  - Memory Management;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IP tunnels definitions;\n  - IPv4 networking;\n  - SCTP protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel futex primitives;\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - ESS Solo-1 ALSA driver;\n  - HD-audio driver;\n  - Simple audio multiplexer codec driver;\n  - SoC Audio for Freescale CPUs drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n(CVE-2023-54125, CVE-2023-54271, CVE-2025-22026, CVE-2025-23131,\nCVE-2025-39863, CVE-2025-39929, CVE-2025-39931, CVE-2026-23364,\nCVE-2026-31449, CVE-2026-31451, CVE-2026-31610, CVE-2026-31700,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31715, CVE-2026-43064, CVE-2026-43216, CVE-2026-43219,\nCVE-2026-43350, CVE-2026-43355, CVE-2026-43491, CVE-2026-43492,\nCVE-2026-45850, CVE-2026-45930, CVE-2026-45991, CVE-2026-45999,\nCVE-2026-46003, CVE-2026-46021, CVE-2026-46026, CVE-2026-46038,\nCVE-2026-46052, CVE-2026-46056, CVE-2026-46065, CVE-2026-46069,\nCVE-2026-46078, CVE-2026-46086, CVE-2026-46090, CVE-2026-46091,\nCVE-2026-46092, CVE-2026-46103, CVE-2026-46116, CVE-2026-46159,\nCVE-2026-46160, CVE-2026-46169, CVE-2026-46180, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46196, CVE-2026-46208, CVE-2026-46252,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46299, CVE-2026-46320,\nCVE-2026-46321, CVE-2026-46322, CVE-2026-52909, CVE-2026-52910,\nCVE-2026-52913, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923,\nCVE-2026-52927, CVE-2026-52928, CVE-2026-52929, CVE-2026-52930,\nCVE-2026-52933, CVE-2026-52934, CVE-2026-52935, CVE-2026-52939,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52947, CVE-2026-52948,\nCVE-2026-52977, CVE-2026-53080, CVE-2026-53090, CVE-2026-53133,\nCVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53139, CVE-2026-53146, CVE-2026-53148,\nCVE-2026-53149, CVE-2026-53150, CVE-2026-53157, CVE-2026-53158,\nCVE-2026-53159, CVE-2026-53161, CVE-2026-53163, CVE-2026-53167,\nCVE-2026-53168, CVE-2026-53177, CVE-2026-53181, CVE-2026-53189,\nCVE-2026-53194, CVE-2026-53195, CVE-2026-53196, CVE-2026-53199,\nCVE-2026-53208, CVE-2026-53213, CVE-2026-53217, CVE-2026-53218,\nCVE-2026-53219, CVE-2026-53223, CVE-2026-53227, CVE-2026-53238,\nCVE-2026-53239, CVE-2026-53245, CVE-2026-53249, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53273,\nCVE-2026-53275, CVE-2026-53325, CVE-2026-53329, CVE-2026-53331,\nCVE-2026-53332, CVE-2026-53337, CVE-2026-53339, CVE-2026-53352,\nCVE-2026-53356, CVE-2026-53357, CVE-2026-53358, CVE-2026-53381,\nCVE-2026-53382, CVE-2026-53383, CVE-2026-53385, CVE-2026-53388,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53397,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63796, CVE-2026-63798, CVE-2026-63801,\nCVE-2026-63803, CVE-2026-63806, CVE-2026-63807, CVE-2026-63809,\nCVE-2026-63810, CVE-2026-63814, CVE-2026-63815, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63827, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830,\nCVE-2026-63831, CVE-2026-63833, CVE-2026-63834, CVE-2026-63835,\nCVE-2026-63836, CVE-2026-63867, CVE-2026-63868, CVE-2026-63870,\nCVE-2026-63875, CVE-2026-63889, CVE-2026-63890, CVE-2026-63891,\nCVE-2026-63892, CVE-2026-63893, CVE-2026-63895, CVE-2026-63897,\nCVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901,\nCVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905,\nCVE-2026-63908, CVE-2026-63913, CVE-2026-63914, CVE-2026-63915,\nCVE-2026-63916, CVE-2026-63917, CVE-2026-63919, CVE-2026-63920,\nCVE-2026-63921, CVE-2026-63925, CVE-2026-63926, CVE-2026-63927,\nCVE-2026-63928, CVE-2026-63930, CVE-2026-63931, CVE-2026-63933,\nCVE-2026-63934, CVE-2026-63942, CVE-2026-63947, CVE-2026-63948,\nCVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63960,\nCVE-2026-63961, CVE-2026-63964, CVE-2026-63967, CVE-2026-63971,\nCVE-2026-63975, CVE-2026-63976, CVE-2026-63985, CVE-2026-63990,\nCVE-2026-63991, CVE-2026-64002, CVE-2026-64004, CVE-2026-64005,\nCVE-2026-64009, CVE-2026-64010, CVE-2026-64011, CVE-2026-64012,\nCVE-2026-64014, CVE-2026-64090, CVE-2026-64093, CVE-2026-64094,\nCVE-2026-64095, CVE-2026-64116, CVE-2026-64118, CVE-2026-64123,\nCVE-2026-64126, CVE-2026-64137, CVE-2026-64170, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64206,\nCVE-2026-64222, CVE-2026-64225, CVE-2026-64234, CVE-2026-64237,\nCVE-2026-64242, CVE-2026-64243, CVE-2026-64246, CVE-2026-64249,\nCVE-2026-64266, CVE-2026-64268, CVE-2026-64269, CVE-2026-64271,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64279, CVE-2026-64296, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64301, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64340, CVE-2026-64342, CVE-2026-64343, CVE-2026-64344,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64355, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,\nCVE-2026-64374, CVE-2026-64375, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64390, CVE-2026-64401, CVE-2026-64403,\nCVE-2026-64408, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,\nCVE-2026-64420, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425,\nCVE-2026-64428, CVE-2026-64429, CVE-2026-64430, CVE-2026-64432,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64440,\nCVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444,\nCVE-2026-64445, CVE-2026-64446, CVE-2026-64448, CVE-2026-64450,\nCVE-2026-64452, CVE-2026-64454, CVE-2026-64455, CVE-2026-64456,\nCVE-2026-64461, CVE-2026-64462, CVE-2026-64465, CVE-2026-64468,\nCVE-2026-64469, CVE-2026-64470, CVE-2026-64471, CVE-2026-64475,\nCVE-2026-64478, CVE-2026-64483, CVE-2026-64484, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64494, CVE-2026-64495, CVE-2026-64496,\nCVE-2026-64497, CVE-2026-64500, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64510, CVE-2026-64512, CVE-2026-64514,\nCVE-2026-64524, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534,\nCVE-2026-64535, CVE-2026-64536, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64540, CVE-2026-64541, CVE-2026-64543, CVE-2026-64544,\nCVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548,\nCVE-2026-64549, CVE-2026-64550, CVE-2026-64551, CVE-2026-64553,\nCVE-2026-64554, CVE-2026-64560, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64569,\nCVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64576,\nCVE-2026-64578, CVE-2026-64579, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64593, CVE-2026-64594, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64602, CVE-2026-64604, CVE-2026-68088,\nCVE-2026-68090, CVE-2026-68091, CVE-2026-68104, CVE-2026-68106,\nCVE-2026-68111, CVE-2026-68115, CVE-2026-68117, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68125, CVE-2026-68127, CVE-2026-68129,\nCVE-2026-68131, CVE-2026-68135, CVE-2026-68137, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68151, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155,\nCVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68160,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68180, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68190, CVE-2026-68192, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68204,\nCVE-2026-68209, CVE-2026-68212, CVE-2026-68213, CVE-2026-68214,\nCVE-2026-68215, CVE-2026-68216, CVE-2026-68217, CVE-2026-68218,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68229, CVE-2026-68231, CVE-2026-68234, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68248, CVE-2026-68249, CVE-2026-68250,\nCVE-2026-68284, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68304, CVE-2026-68309,\nCVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68331, CVE-2026-68333, CVE-2026-68335,\nCVE-2026-68338, CVE-2026-68340, CVE-2026-68349, CVE-2026-68350,\nCVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354,\nCVE-2026-68355, CVE-2026-68357, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,\nCVE-2026-68369, CVE-2026-68370, CVE-2026-68373, CVE-2026-68376,\nCVE-2026-68377, CVE-2026-68388, CVE-2026-68395, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68402, CVE-2026-68403, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68410, CVE-2026-68411, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68417, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68428, CVE-2026-68430, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68444, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450,\nCVE-2026-68451, CVE-2026-68452, CVE-2026-68456, CVE-2026-68459,\nCVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72010, CVE-2026-72013, CVE-2026-72014,\nCVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72033, CVE-2026-72036,\nCVE-2026-72038, CVE-2026-72039, CVE-2026-72047, CVE-2026-72048,\nCVE-2026-72049, CVE-2026-72052, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72056, CVE-2026-72061, CVE-2026-72066, CVE-2026-72067,\nCVE-2026-72068, CVE-2026-72074, CVE-2026-72076, CVE-2026-72078,\nCVE-2026-72079, CVE-2026-72081, CVE-2026-72082, CVE-2026-72083,\nCVE-2026-72084, CVE-2026-72085, CVE-2026-72086, CVE-2026-72088,\nCVE-2026-72102, CVE-2026-72105, CVE-2026-72107, CVE-2026-72108,\nCVE-2026-72109, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72129,\nCVE-2026-72133, CVE-2026-72135, CVE-2026-72136, CVE-2026-72138,\nCVE-2026-72140, CVE-2026-72146, CVE-2026-72153, CVE-2026-72159,\nCVE-2026-72160, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72171, CVE-2026-72181,\nCVE-2026-72182, CVE-2026-72192, CVE-2026-72193, CVE-2026-72194,\nCVE-2026-72195, CVE-2026-72197, CVE-2026-72215, CVE-2026-72218,\nCVE-2026-72219, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72226, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230,\nCVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72234,\nCVE-2026-72235, CVE-2026-72238, CVE-2026-72240, CVE-2026-72241,\nCVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72251,\nCVE-2026-72256, CVE-2026-72264, CVE-2026-72265, CVE-2026-72267,\nCVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,\nCVE-2026-72272, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,\nCVE-2026-72282, CVE-2026-72289, CVE-2026-72296, CVE-2026-72297,\nCVE-2026-72298, CVE-2026-72306, CVE-2026-72307, CVE-2026-72310,\nCVE-2026-72314, CVE-2026-72316, CVE-2026-72319, CVE-2026-72322,\nCVE-2026-72326, CVE-2026-72339, CVE-2026-72347, CVE-2026-72348,\nCVE-2026-72349, CVE-2026-72350, CVE-2026-72351, CVE-2026-72371,\nCVE-2026-72374, CVE-2026-72378, CVE-2026-72389, CVE-2026-72392,\nCVE-2026-72396, CVE-2026-72400, CVE-2026-72406, CVE-2026-72409,\nCVE-2026-72414, CVE-2026-72418, CVE-2026-72421, CVE-2026-72422,\nCVE-2026-72428, CVE-2026-72433, CVE-2026-72435, CVE-2026-72441,\nCVE-2026-72447, CVE-2026-72448, CVE-2026-72450, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72466, CVE-2026-72476, CVE-2026-72479,\nCVE-2026-72481, CVE-2026-72483, CVE-2026-72484, CVE-2026-72489,\nCVE-2026-72491, CVE-2026-72492, CVE-2026-72502, CVE-2026-74255,\nCVE-2026-74256, CVE-2026-74262, CVE-2026-74265, CVE-2026-74267,\nCVE-2026-74276, CVE-2026-74279, CVE-2026-74280, CVE-2026-74281,\nCVE-2026-74282, CVE-2026-74283, CVE-2026-74284, CVE-2026-74287,\nCVE-2026-74288, CVE-2026-74292, CVE-2026-74293, CVE-2026-74295,\nCVE-2026-74297, CVE-2026-74305, CVE-2026-74312, CVE-2026-74313,\nCVE-2026-74320, CVE-2026-74321, CVE-2026-74327, CVE-2026-74329,\nCVE-2026-74330, CVE-2026-74331, CVE-2026-74339, CVE-2026-74340,\nCVE-2026-74346, CVE-2026-74348, CVE-2026-74349, CVE-2026-74351,\nCVE-2026-74359, CVE-2026-74363, CVE-2026-74376, CVE-2026-74379,\nCVE-2026-74382, CVE-2026-74384, CVE-2026-74390, CVE-2026-74394,\nCVE-2026-74395, CVE-2026-74398, CVE-2026-74399, CVE-2026-74402,\nCVE-2026-74408, CVE-2026-74410, CVE-2026-74416, CVE-2026-74424,\nCVE-2026-74426, CVE-2026-74427, CVE-2026-74438, CVE-2026-74443,\nCVE-2026-74444, CVE-2026-74453, CVE-2026-74455, CVE-2026-74456,\nCVE-2026-74457, CVE-2026-74458, CVE-2026-74459, CVE-2026-74460,\nCVE-2026-74461, CVE-2026-74463, CVE-2026-74464, CVE-2026-74465,\nCVE-2026-74467, CVE-2026-74468, CVE-2026-74469, CVE-2026-74471,\nCVE-2026-74473, CVE-2026-74475, CVE-2026-74478, CVE-2026-74480,\nCVE-2026-74481, CVE-2026-74482, CVE-2026-74485, CVE-2026-74488,\nCVE-2026-74490, CVE-2026-74492, CVE-2026-74493, CVE-2026-74495,\nCVE-2026-74497, CVE-2026-74498, CVE-2026-74499, CVE-2026-74505,\nCVE-2026-74507, CVE-2026-74508, CVE-2026-74512, CVE-2026-74518,\nCVE-2026-74519, CVE-2026-74523, CVE-2026-74525, CVE-2026-74540,\nCVE-2026-74546, CVE-2026-74547, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74556, CVE-2026-74557, CVE-2026-74563, CVE-2026-74564,\nCVE-2026-74566, CVE-2026-74567, CVE-2026-74569, CVE-2026-74577,\nCVE-2026-74578, CVE-2026-74579, CVE-2026-74580, CVE-2026-74581,\nCVE-2026-74583, CVE-2026-74584, CVE-2026-74585, CVE-2026-74586,\nCVE-2026-74587, CVE-2026-74588, CVE-2026-74589, CVE-2026-74597,\nCVE-2026-74598, CVE-2026-74604, CVE-2026-74609, CVE-2026-74613,\nCVE-2026-74614, CVE-2026-74615, CVE-2026-74616, CVE-2026-74620,\nCVE-2026-74622, CVE-2026-74625, CVE-2026-74630, CVE-2026-74635,\nCVE-2026-74636, CVE-2026-74641, CVE-2026-74648, CVE-2026-74649,\nCVE-2026-74650, CVE-2026-74651, CVE-2026-74654, CVE-2026-74656,\nCVE-2026-74657, CVE-2026-74658, CVE-2026-74659, CVE-2026-74660,\nCVE-2026-74664, CVE-2026-74667, CVE-2026-74669, CVE-2026-74671,\nCVE-2026-74673, CVE-2026-74675, CVE-2026-74676, CVE-2026-74679,\nCVE-2026-74680, CVE-2026-74682, CVE-2026-74683, CVE-2026-74688,\nCVE-2026-74691, CVE-2026-74692, CVE-2026-74693, CVE-2026-74694,\nCVE-2026-74696, CVE-2026-74697, CVE-2026-74701, CVE-2026-74704,\nCVE-2026-74705, CVE-2026-74717, CVE-2026-74719, CVE-2026-74720,\nCVE-2026-74726, CVE-2026-74730, CVE-2026-80591, CVE-2026-80593,\nCVE-2026-80594, CVE-2026-80595, CVE-2026-80597, CVE-2026-80598,\nCVE-2026-80599, CVE-2026-80600, CVE-2026-80601, CVE-2026-80603,\nCVE-2026-80605, CVE-2026-80609, CVE-2026-80613, CVE-2026-80619,\nCVE-2026-80622, CVE-2026-80626, CVE-2026-80627, CVE-2026-80630,\nCVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,\nCVE-2026-80649, CVE-2026-80652, CVE-2026-80659, CVE-2026-80664,\nCVE-2026-80677, CVE-2026-80679, CVE-2026-80680, CVE-2026-80681,\nCVE-2026-80706, CVE-2026-80707, CVE-2026-80708, CVE-2026-80714,\nCVE-2026-80716, CVE-2026-80717, CVE-2026-80718, CVE-2026-80722,\nCVE-2026-80731, CVE-2026-80732, CVE-2026-80733, CVE-2026-80867,\nCVE-2026-80875, CVE-2026-80876, CVE-2026-80877, CVE-2026-80879,\nCVE-2026-80880, CVE-2026-80881, CVE-2026-80886, CVE-2026-80890,\nCVE-2026-80902, CVE-2026-89774)\n","status":"published","published":"2026-10-06T10:11:54Z","modified":"2026-11-09T12:57:13.092440605Z","updated_at":"2026-11-07T02:28:12.524765Z"},{"id":"USN-8875-2","title":"linux-nvidia vulnerabilities","description":"It was discovered that the i.MX clock driver in the Linux kernel did not\nproperly handle certain memory allocation failure conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2022-3114)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - User-space API (UAPI);\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - Generic PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Reset controller framework;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - KVM subsystem;\n  - Networking core;\n  - Netfilter;\n  - Socket messages infrastructure;\n  - Network sockets;\n  - Memory Management;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IP tunnels definitions;\n  - IPv4 networking;\n  - SCTP protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel futex primitives;\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - ESS Solo-1 ALSA driver;\n  - HD-audio driver;\n  - Simple audio multiplexer codec driver;\n  - SoC Audio for Freescale CPUs drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n(CVE-2023-54125, CVE-2023-54271, CVE-2025-22026, CVE-2025-23131,\nCVE-2025-39863, CVE-2025-39929, CVE-2025-39931, CVE-2026-23364,\nCVE-2026-31449, CVE-2026-31451, CVE-2026-31610, CVE-2026-31700,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31715, CVE-2026-43064, CVE-2026-43216, CVE-2026-43219,\nCVE-2026-43350, CVE-2026-43355, CVE-2026-43491, CVE-2026-43492,\nCVE-2026-45850, CVE-2026-45930, CVE-2026-45991, CVE-2026-45999,\nCVE-2026-46003, CVE-2026-46021, CVE-2026-46026, CVE-2026-46038,\nCVE-2026-46052, CVE-2026-46056, CVE-2026-46065, CVE-2026-46069,\nCVE-2026-46078, CVE-2026-46086, CVE-2026-46090, CVE-2026-46091,\nCVE-2026-46092, CVE-2026-46103, CVE-2026-46116, CVE-2026-46159,\nCVE-2026-46160, CVE-2026-46169, CVE-2026-46180, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46196, CVE-2026-46208, CVE-2026-46252,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46299, CVE-2026-46320,\nCVE-2026-46321, CVE-2026-46322, CVE-2026-52909, CVE-2026-52910,\nCVE-2026-52913, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923,\nCVE-2026-52927, CVE-2026-52928, CVE-2026-52929, CVE-2026-52930,\nCVE-2026-52933, CVE-2026-52934, CVE-2026-52935, CVE-2026-52939,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52947, CVE-2026-52948,\nCVE-2026-52977, CVE-2026-53080, CVE-2026-53090, CVE-2026-53133,\nCVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53139, CVE-2026-53146, CVE-2026-53148,\nCVE-2026-53149, CVE-2026-53150, CVE-2026-53157, CVE-2026-53158,\nCVE-2026-53159, CVE-2026-53161, CVE-2026-53163, CVE-2026-53167,\nCVE-2026-53168, CVE-2026-53177, CVE-2026-53181, CVE-2026-53189,\nCVE-2026-53194, CVE-2026-53195, CVE-2026-53196, CVE-2026-53199,\nCVE-2026-53208, CVE-2026-53213, CVE-2026-53217, CVE-2026-53218,\nCVE-2026-53219, CVE-2026-53223, CVE-2026-53227, CVE-2026-53238,\nCVE-2026-53239, CVE-2026-53245, CVE-2026-53249, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53273,\nCVE-2026-53275, CVE-2026-53325, CVE-2026-53329, CVE-2026-53331,\nCVE-2026-53332, CVE-2026-53337, CVE-2026-53339, CVE-2026-53352,\nCVE-2026-53356, CVE-2026-53357, CVE-2026-53358, CVE-2026-53381,\nCVE-2026-53382, CVE-2026-53383, CVE-2026-53385, CVE-2026-53388,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53397,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63796, CVE-2026-63798, CVE-2026-63801,\nCVE-2026-63803, CVE-2026-63806, CVE-2026-63807, CVE-2026-63809,\nCVE-2026-63810, CVE-2026-63814, CVE-2026-63815, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63827, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830,\nCVE-2026-63831, CVE-2026-63833, CVE-2026-63834, CVE-2026-63835,\nCVE-2026-63836, CVE-2026-63867, CVE-2026-63868, CVE-2026-63870,\nCVE-2026-63875, CVE-2026-63889, CVE-2026-63890, CVE-2026-63891,\nCVE-2026-63892, CVE-2026-63893, CVE-2026-63895, CVE-2026-63897,\nCVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901,\nCVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905,\nCVE-2026-63908, CVE-2026-63913, CVE-2026-63914, CVE-2026-63915,\nCVE-2026-63916, CVE-2026-63917, CVE-2026-63919, CVE-2026-63920,\nCVE-2026-63921, CVE-2026-63925, CVE-2026-63926, CVE-2026-63927,\nCVE-2026-63928, CVE-2026-63930, CVE-2026-63931, CVE-2026-63933,\nCVE-2026-63934, CVE-2026-63942, CVE-2026-63947, CVE-2026-63948,\nCVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63960,\nCVE-2026-63961, CVE-2026-63964, CVE-2026-63967, CVE-2026-63971,\nCVE-2026-63975, CVE-2026-63976, CVE-2026-63985, CVE-2026-63990,\nCVE-2026-63991, CVE-2026-64002, CVE-2026-64004, CVE-2026-64005,\nCVE-2026-64009, CVE-2026-64010, CVE-2026-64011, CVE-2026-64012,\nCVE-2026-64014, CVE-2026-64090, CVE-2026-64093, CVE-2026-64094,\nCVE-2026-64095, CVE-2026-64116, CVE-2026-64118, CVE-2026-64123,\nCVE-2026-64126, CVE-2026-64137, CVE-2026-64170, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64206,\nCVE-2026-64222, CVE-2026-64225, CVE-2026-64234, CVE-2026-64237,\nCVE-2026-64242, CVE-2026-64243, CVE-2026-64246, CVE-2026-64249,\nCVE-2026-64266, CVE-2026-64268, CVE-2026-64269, CVE-2026-64271,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64279, CVE-2026-64296, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64301, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64340, CVE-2026-64342, CVE-2026-64343, CVE-2026-64344,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64355, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,\nCVE-2026-64374, CVE-2026-64375, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64390, CVE-2026-64401, CVE-2026-64403,\nCVE-2026-64408, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,\nCVE-2026-64420, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425,\nCVE-2026-64428, CVE-2026-64429, CVE-2026-64430, CVE-2026-64432,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64440,\nCVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444,\nCVE-2026-64445, CVE-2026-64446, CVE-2026-64448, CVE-2026-64450,\nCVE-2026-64452, CVE-2026-64454, CVE-2026-64455, CVE-2026-64456,\nCVE-2026-64461, CVE-2026-64462, CVE-2026-64465, CVE-2026-64468,\nCVE-2026-64469, CVE-2026-64470, CVE-2026-64471, CVE-2026-64475,\nCVE-2026-64478, CVE-2026-64483, CVE-2026-64484, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64494, CVE-2026-64495, CVE-2026-64496,\nCVE-2026-64497, CVE-2026-64500, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64510, CVE-2026-64512, CVE-2026-64514,\nCVE-2026-64524, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534,\nCVE-2026-64535, CVE-2026-64536, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64540, CVE-2026-64541, CVE-2026-64543, CVE-2026-64544,\nCVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548,\nCVE-2026-64549, CVE-2026-64550, CVE-2026-64551, CVE-2026-64553,\nCVE-2026-64554, CVE-2026-64560, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64569,\nCVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64576,\nCVE-2026-64578, CVE-2026-64579, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64593, CVE-2026-64594, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64602, CVE-2026-64604, CVE-2026-68088,\nCVE-2026-68090, CVE-2026-68091, CVE-2026-68104, CVE-2026-68106,\nCVE-2026-68111, CVE-2026-68115, CVE-2026-68117, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68125, CVE-2026-68127, CVE-2026-68129,\nCVE-2026-68131, CVE-2026-68135, CVE-2026-68137, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68151, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155,\nCVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68160,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68180, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68190, CVE-2026-68192, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68204,\nCVE-2026-68209, CVE-2026-68212, CVE-2026-68213, CVE-2026-68214,\nCVE-2026-68215, CVE-2026-68216, CVE-2026-68217, CVE-2026-68218,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68229, CVE-2026-68231, CVE-2026-68234, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68248, CVE-2026-68249, CVE-2026-68250,\nCVE-2026-68284, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68304, CVE-2026-68309,\nCVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68331, CVE-2026-68333, CVE-2026-68335,\nCVE-2026-68338, CVE-2026-68340, CVE-2026-68349, CVE-2026-68350,\nCVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354,\nCVE-2026-68355, CVE-2026-68357, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,\nCVE-2026-68369, CVE-2026-68370, CVE-2026-68373, CVE-2026-68376,\nCVE-2026-68377, CVE-2026-68388, CVE-2026-68395, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68402, CVE-2026-68403, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68410, CVE-2026-68411, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68417, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68428, CVE-2026-68430, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68444, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450,\nCVE-2026-68451, CVE-2026-68452, CVE-2026-68456, CVE-2026-68459,\nCVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72010, CVE-2026-72013, CVE-2026-72014,\nCVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72033, CVE-2026-72036,\nCVE-2026-72038, CVE-2026-72039, CVE-2026-72047, CVE-2026-72048,\nCVE-2026-72049, CVE-2026-72052, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72056, CVE-2026-72061, CVE-2026-72066, CVE-2026-72067,\nCVE-2026-72068, CVE-2026-72074, CVE-2026-72076, CVE-2026-72078,\nCVE-2026-72079, CVE-2026-72081, CVE-2026-72082, CVE-2026-72083,\nCVE-2026-72084, CVE-2026-72085, CVE-2026-72086, CVE-2026-72088,\nCVE-2026-72102, CVE-2026-72105, CVE-2026-72107, CVE-2026-72108,\nCVE-2026-72109, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72129,\nCVE-2026-72133, CVE-2026-72135, CVE-2026-72136, CVE-2026-72138,\nCVE-2026-72140, CVE-2026-72146, CVE-2026-72153, CVE-2026-72159,\nCVE-2026-72160, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72171, CVE-2026-72181,\nCVE-2026-72182, CVE-2026-72192, CVE-2026-72193, CVE-2026-72194,\nCVE-2026-72195, CVE-2026-72197, CVE-2026-72215, CVE-2026-72218,\nCVE-2026-72219, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72226, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230,\nCVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72234,\nCVE-2026-72235, CVE-2026-72238, CVE-2026-72240, CVE-2026-72241,\nCVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72251,\nCVE-2026-72256, CVE-2026-72264, CVE-2026-72265, CVE-2026-72267,\nCVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,\nCVE-2026-72272, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,\nCVE-2026-72282, CVE-2026-72289, CVE-2026-72296, CVE-2026-72297,\nCVE-2026-72298, CVE-2026-72306, CVE-2026-72307, CVE-2026-72310,\nCVE-2026-72314, CVE-2026-72316, CVE-2026-72319, CVE-2026-72322,\nCVE-2026-72326, CVE-2026-72339, CVE-2026-72347, CVE-2026-72348,\nCVE-2026-72349, CVE-2026-72350, CVE-2026-72351, CVE-2026-72371,\nCVE-2026-72374, CVE-2026-72378, CVE-2026-72389, CVE-2026-72392,\nCVE-2026-72396, CVE-2026-72400, CVE-2026-72406, CVE-2026-72409,\nCVE-2026-72414, CVE-2026-72418, CVE-2026-72421, CVE-2026-72422,\nCVE-2026-72428, CVE-2026-72433, CVE-2026-72435, CVE-2026-72441,\nCVE-2026-72447, CVE-2026-72448, CVE-2026-72450, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72466, CVE-2026-72476, CVE-2026-72479,\nCVE-2026-72481, CVE-2026-72483, CVE-2026-72484, CVE-2026-72489,\nCVE-2026-72491, CVE-2026-72492, CVE-2026-72502, CVE-2026-74255,\nCVE-2026-74256, CVE-2026-74262, CVE-2026-74265, CVE-2026-74267,\nCVE-2026-74276, CVE-2026-74279, CVE-2026-74280, CVE-2026-74281,\nCVE-2026-74282, CVE-2026-74283, CVE-2026-74284, CVE-2026-74287,\nCVE-2026-74288, CVE-2026-74292, CVE-2026-74293, CVE-2026-74295,\nCVE-2026-74297, CVE-2026-74305, CVE-2026-74312, CVE-2026-74313,\nCVE-2026-74320, CVE-2026-74321, CVE-2026-74327, CVE-2026-74329,\nCVE-2026-74330, CVE-2026-74331, CVE-2026-74339, CVE-2026-74340,\nCVE-2026-74346, CVE-2026-74348, CVE-2026-74349, CVE-2026-74351,\nCVE-2026-74359, CVE-2026-74363, CVE-2026-74376, CVE-2026-74379,\nCVE-2026-74382, CVE-2026-74384, CVE-2026-74390, CVE-2026-74394,\nCVE-2026-74395, CVE-2026-74398, CVE-2026-74399, CVE-2026-74402,\nCVE-2026-74408, CVE-2026-74410, CVE-2026-74416, CVE-2026-74424,\nCVE-2026-74426, CVE-2026-74427, CVE-2026-74438, CVE-2026-74443,\nCVE-2026-74444, CVE-2026-74453, CVE-2026-74455, CVE-2026-74456,\nCVE-2026-74457, CVE-2026-74458, CVE-2026-74459, CVE-2026-74460,\nCVE-2026-74461, CVE-2026-74463, CVE-2026-74464, CVE-2026-74465,\nCVE-2026-74467, CVE-2026-74468, CVE-2026-74469, CVE-2026-74471,\nCVE-2026-74473, CVE-2026-74475, CVE-2026-74478, CVE-2026-74480,\nCVE-2026-74481, CVE-2026-74482, CVE-2026-74485, CVE-2026-74488,\nCVE-2026-74490, CVE-2026-74492, CVE-2026-74493, CVE-2026-74495,\nCVE-2026-74497, CVE-2026-74498, CVE-2026-74499, CVE-2026-74505,\nCVE-2026-74507, CVE-2026-74508, CVE-2026-74512, CVE-2026-74518,\nCVE-2026-74519, CVE-2026-74523, CVE-2026-74525, CVE-2026-74540,\nCVE-2026-74546, CVE-2026-74547, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74556, CVE-2026-74557, CVE-2026-74563, CVE-2026-74564,\nCVE-2026-74566, CVE-2026-74567, CVE-2026-74569, CVE-2026-74577,\nCVE-2026-74578, CVE-2026-74579, CVE-2026-74580, CVE-2026-74581,\nCVE-2026-74583, CVE-2026-74584, CVE-2026-74585, CVE-2026-74586,\nCVE-2026-74587, CVE-2026-74588, CVE-2026-74589, CVE-2026-74597,\nCVE-2026-74598, CVE-2026-74604, CVE-2026-74609, CVE-2026-74613,\nCVE-2026-74614, CVE-2026-74615, CVE-2026-74616, CVE-2026-74620,\nCVE-2026-74622, CVE-2026-74625, CVE-2026-74630, CVE-2026-74635,\nCVE-2026-74636, CVE-2026-74641, CVE-2026-74648, CVE-2026-74649,\nCVE-2026-74650, CVE-2026-74651, CVE-2026-74654, CVE-2026-74656,\nCVE-2026-74657, CVE-2026-74658, CVE-2026-74659, CVE-2026-74660,\nCVE-2026-74664, CVE-2026-74667, CVE-2026-74669, CVE-2026-74671,\nCVE-2026-74673, CVE-2026-74675, CVE-2026-74676, CVE-2026-74679,\nCVE-2026-74680, CVE-2026-74682, CVE-2026-74683, CVE-2026-74688,\nCVE-2026-74691, CVE-2026-74692, CVE-2026-74693, CVE-2026-74694,\nCVE-2026-74696, CVE-2026-74697, CVE-2026-74701, CVE-2026-74704,\nCVE-2026-74705, CVE-2026-74717, CVE-2026-74719, CVE-2026-74720,\nCVE-2026-74726, CVE-2026-74730, CVE-2026-80591, CVE-2026-80593,\nCVE-2026-80594, CVE-2026-80595, CVE-2026-80597, CVE-2026-80598,\nCVE-2026-80599, CVE-2026-80600, CVE-2026-80601, CVE-2026-80603,\nCVE-2026-80605, CVE-2026-80609, CVE-2026-80613, CVE-2026-80619,\nCVE-2026-80622, CVE-2026-80626, CVE-2026-80627, CVE-2026-80630,\nCVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,\nCVE-2026-80649, CVE-2026-80652, CVE-2026-80659, CVE-2026-80664,\nCVE-2026-80677, CVE-2026-80679, CVE-2026-80680, CVE-2026-80681,\nCVE-2026-80706, CVE-2026-80707, CVE-2026-80708, CVE-2026-80714,\nCVE-2026-80716, CVE-2026-80717, CVE-2026-80718, CVE-2026-80722,\nCVE-2026-80731, CVE-2026-80732, CVE-2026-80733, CVE-2026-80867,\nCVE-2026-80875, CVE-2026-80876, CVE-2026-80877, CVE-2026-80879,\nCVE-2026-80880, CVE-2026-80881, CVE-2026-80886, CVE-2026-80890,\nCVE-2026-80902, CVE-2026-89774)\n","status":"published","published":"2026-10-09T08:38:43Z","modified":"2026-11-09T12:48:15.608953479Z","updated_at":"2026-11-07T01:56:47.245871Z"},{"id":"USN-8876-1","title":"linux-azure-fde vulnerabilities","description":"It was discovered that the i.MX clock driver in the Linux kernel did not\nproperly handle certain memory allocation failure conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2022-3114)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - Intel Stratix 10 firmware drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MTD block device drivers;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - Generic PM domains;\n  - Power supply drivers;\n  - Voltage and Current Regulator drivers;\n  - Reset controller framework;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - Netfilter;\n  - Socket messages infrastructure;\n  - Network sockets;\n  - Memory Management;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Networking core;\n  - IP tunnels definitions;\n  - IPv4 networking;\n  - SCTP protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel futex primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Key management;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - ESS Solo-1 ALSA driver;\n  - HD-audio driver;\n  - SoC Audio for Freescale CPUs drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2023-54125, CVE-2023-54271, CVE-2025-22026, CVE-2025-23131,\nCVE-2025-39863, CVE-2025-39929, CVE-2025-39931, CVE-2026-23364,\nCVE-2026-31449, CVE-2026-31451, CVE-2026-31610, CVE-2026-31700,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31715, CVE-2026-43064, CVE-2026-43216, CVE-2026-43219,\nCVE-2026-43350, CVE-2026-43355, CVE-2026-43491, CVE-2026-43492,\nCVE-2026-45850, CVE-2026-45930, CVE-2026-45991, CVE-2026-45999,\nCVE-2026-46003, CVE-2026-46021, CVE-2026-46026, CVE-2026-46038,\nCVE-2026-46052, CVE-2026-46056, CVE-2026-46065, CVE-2026-46069,\nCVE-2026-46078, CVE-2026-46086, CVE-2026-46090, CVE-2026-46091,\nCVE-2026-46092, CVE-2026-46103, CVE-2026-46116, CVE-2026-46159,\nCVE-2026-46160, CVE-2026-46169, CVE-2026-46180, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46196, CVE-2026-46208, CVE-2026-46252,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46299, CVE-2026-46320,\nCVE-2026-46321, CVE-2026-46322, CVE-2026-52909, CVE-2026-52910,\nCVE-2026-52913, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923,\nCVE-2026-52927, CVE-2026-52928, CVE-2026-52929, CVE-2026-52930,\nCVE-2026-52933, CVE-2026-52934, CVE-2026-52935, CVE-2026-52939,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52947, CVE-2026-52948,\nCVE-2026-52977, CVE-2026-53080, CVE-2026-53090, CVE-2026-53133,\nCVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53139, CVE-2026-53146, CVE-2026-53148,\nCVE-2026-53149, CVE-2026-53150, CVE-2026-53157, CVE-2026-53158,\nCVE-2026-53159, CVE-2026-53161, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53177, CVE-2026-53181, CVE-2026-53189, CVE-2026-53194,\nCVE-2026-53195, CVE-2026-53196, CVE-2026-53199, CVE-2026-53208,\nCVE-2026-53213, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53223, CVE-2026-53227, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53245, CVE-2026-53249, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53263,\nCVE-2026-53264, CVE-2026-53265, CVE-2026-53266, CVE-2026-53268,\nCVE-2026-53269, CVE-2026-53270, CVE-2026-53273, CVE-2026-53275,\nCVE-2026-53325, CVE-2026-53332, CVE-2026-53392, CVE-2026-53393,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-63806,\nCVE-2026-63810, CVE-2026-63815, CVE-2026-63817, CVE-2026-63818,\nCVE-2026-63827, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830,\nCVE-2026-64187, CVE-2026-64189, CVE-2026-64206, CVE-2026-64266,\nCVE-2026-64268, CVE-2026-64269, CVE-2026-64271, CVE-2026-64273,\nCVE-2026-64274, CVE-2026-64275, CVE-2026-64276, CVE-2026-64277,\nCVE-2026-64279, CVE-2026-64296, CVE-2026-64298, CVE-2026-64299,\nCVE-2026-64301, CVE-2026-64303, CVE-2026-64304, CVE-2026-64306,\nCVE-2026-64312, CVE-2026-64313, CVE-2026-64315, CVE-2026-64316,\nCVE-2026-64317, CVE-2026-64318, CVE-2026-64322, CVE-2026-64323,\nCVE-2026-64324, CVE-2026-64329, CVE-2026-64330, CVE-2026-64331,\nCVE-2026-64332, CVE-2026-64333, CVE-2026-64334, CVE-2026-64335,\nCVE-2026-64336, CVE-2026-64337, CVE-2026-64338, CVE-2026-64340,\nCVE-2026-64342, CVE-2026-64343, CVE-2026-64344, CVE-2026-64346,\nCVE-2026-64347, CVE-2026-64350, CVE-2026-64351, CVE-2026-64352,\nCVE-2026-64355, CVE-2026-64359, CVE-2026-64360, CVE-2026-64361,\nCVE-2026-64362, CVE-2026-64363, CVE-2026-64364, CVE-2026-64370,\nCVE-2026-64371, CVE-2026-64372, CVE-2026-64373, CVE-2026-64374,\nCVE-2026-64375, CVE-2026-64379, CVE-2026-64380, CVE-2026-64381,\nCVE-2026-64390, CVE-2026-64401, CVE-2026-64403, CVE-2026-64408,\nCVE-2026-64411, CVE-2026-64412, CVE-2026-64413, CVE-2026-64420,\nCVE-2026-64422, CVE-2026-64423, CVE-2026-64425, CVE-2026-64428,\nCVE-2026-64429, CVE-2026-64430, CVE-2026-64432, CVE-2026-64435,\nCVE-2026-64436, CVE-2026-64438, CVE-2026-64440, CVE-2026-64441,\nCVE-2026-64442, CVE-2026-64443, CVE-2026-64444, CVE-2026-64445,\nCVE-2026-64446, CVE-2026-64448, CVE-2026-64450, CVE-2026-64452,\nCVE-2026-64454, CVE-2026-64455, CVE-2026-64456, CVE-2026-64461,\nCVE-2026-64462, CVE-2026-64465, CVE-2026-64468, CVE-2026-64469,\nCVE-2026-64470, CVE-2026-64471, CVE-2026-64475, CVE-2026-64478,\nCVE-2026-64483, CVE-2026-64484, CVE-2026-64487, CVE-2026-64488,\nCVE-2026-64494, CVE-2026-64495, CVE-2026-64496, CVE-2026-64497,\nCVE-2026-64500, CVE-2026-64503, CVE-2026-64504, CVE-2026-64505,\nCVE-2026-64510, CVE-2026-64512, CVE-2026-64514, CVE-2026-64530,\nCVE-2026-64532, CVE-2026-64533, CVE-2026-64534, CVE-2026-64535,\nCVE-2026-64536, CVE-2026-64537, CVE-2026-64538, CVE-2026-64540,\nCVE-2026-64541, CVE-2026-64543, CVE-2026-64544, CVE-2026-64545,\nCVE-2026-64546, CVE-2026-64547, CVE-2026-64548, CVE-2026-64549,\nCVE-2026-64550, CVE-2026-64551, CVE-2026-64553, CVE-2026-64554,\nCVE-2026-64560, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564,\nCVE-2026-64565, CVE-2026-64567, CVE-2026-64569, CVE-2026-64571,\nCVE-2026-64572, CVE-2026-64573, CVE-2026-64576, CVE-2026-64578,\nCVE-2026-64579, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64593, CVE-2026-64594, CVE-2026-64599, CVE-2026-64600,\nCVE-2026-64602, CVE-2026-64604, CVE-2026-68088, CVE-2026-68090,\nCVE-2026-68091, CVE-2026-68104, CVE-2026-68106, CVE-2026-68111,\nCVE-2026-68115, CVE-2026-68117, CVE-2026-68121, CVE-2026-68123,\nCVE-2026-68125, CVE-2026-68127, CVE-2026-68129, CVE-2026-68131,\nCVE-2026-68135, CVE-2026-68137, CVE-2026-68140, CVE-2026-68141,\nCVE-2026-68142, CVE-2026-68143, CVE-2026-68144, CVE-2026-68151,\nCVE-2026-68153, CVE-2026-68154, CVE-2026-68155, CVE-2026-68156,\nCVE-2026-68157, CVE-2026-68158, CVE-2026-68160, CVE-2026-68175,\nCVE-2026-68176, CVE-2026-68180, CVE-2026-68182, CVE-2026-68183,\nCVE-2026-68184, CVE-2026-68186, CVE-2026-68187, CVE-2026-68188,\nCVE-2026-68190, CVE-2026-68192, CVE-2026-68195, CVE-2026-68196,\nCVE-2026-68197, CVE-2026-68199, CVE-2026-68204, CVE-2026-68209,\nCVE-2026-68212, CVE-2026-68213, CVE-2026-68214, CVE-2026-68215,\nCVE-2026-68216, CVE-2026-68217, CVE-2026-68218, CVE-2026-68222,\nCVE-2026-68223, CVE-2026-68226, CVE-2026-68227, CVE-2026-68229,\nCVE-2026-68231, CVE-2026-68234, CVE-2026-68243, CVE-2026-68244,\nCVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68284,\nCVE-2026-68294, CVE-2026-68297, CVE-2026-68299, CVE-2026-68300,\nCVE-2026-68301, CVE-2026-68304, CVE-2026-68309, CVE-2026-68313,\nCVE-2026-68315, CVE-2026-68320, CVE-2026-68322, CVE-2026-68324,\nCVE-2026-68325, CVE-2026-68326, CVE-2026-68327, CVE-2026-68328,\nCVE-2026-68331, CVE-2026-68333, CVE-2026-68335, CVE-2026-68338,\nCVE-2026-68340, CVE-2026-68349, CVE-2026-68350, CVE-2026-68351,\nCVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68355,\nCVE-2026-68357, CVE-2026-68360, CVE-2026-68361, CVE-2026-68363,\nCVE-2026-68365, CVE-2026-68366, CVE-2026-68368, CVE-2026-68369,\nCVE-2026-68370, CVE-2026-68373, CVE-2026-68376, CVE-2026-68377,\nCVE-2026-68388, CVE-2026-68395, CVE-2026-68397, CVE-2026-68398,\nCVE-2026-68402, CVE-2026-68403, CVE-2026-68405, CVE-2026-68406,\nCVE-2026-68410, CVE-2026-68411, CVE-2026-68413, CVE-2026-68414,\nCVE-2026-68417, CVE-2026-68422, CVE-2026-68425, CVE-2026-68428,\nCVE-2026-68430, CVE-2026-68432, CVE-2026-68433, CVE-2026-68444,\nCVE-2026-68446, CVE-2026-68449, CVE-2026-68450, CVE-2026-68451,\nCVE-2026-68452, CVE-2026-68456, CVE-2026-68459, CVE-2026-68460,\nCVE-2026-68461, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469,\nCVE-2026-68474, CVE-2026-68475, CVE-2026-68477, CVE-2026-68478,\nCVE-2026-68479, CVE-2026-68480, CVE-2026-72004, CVE-2026-72005,\nCVE-2026-72010, CVE-2026-72013, CVE-2026-72014, CVE-2026-72019,\nCVE-2026-72020, CVE-2026-72021, CVE-2026-72022, CVE-2026-72024,\nCVE-2026-72025, CVE-2026-72033, CVE-2026-72036, CVE-2026-72038,\nCVE-2026-72039, CVE-2026-72047, CVE-2026-72048, CVE-2026-72049,\nCVE-2026-72052, CVE-2026-72054, CVE-2026-72055, CVE-2026-72056,\nCVE-2026-72061, CVE-2026-72066, CVE-2026-72067, CVE-2026-72068,\nCVE-2026-72074, CVE-2026-72076, CVE-2026-72078, CVE-2026-72079,\nCVE-2026-72081, CVE-2026-72082, CVE-2026-72083, CVE-2026-72084,\nCVE-2026-72085, CVE-2026-72086, CVE-2026-72088, CVE-2026-72102,\nCVE-2026-72105, CVE-2026-72107, CVE-2026-72108, CVE-2026-72109,\nCVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116,\nCVE-2026-72117, CVE-2026-72118, CVE-2026-72119, CVE-2026-72120,\nCVE-2026-72121, CVE-2026-72122, CVE-2026-72123, CVE-2026-72124,\nCVE-2026-72125, CVE-2026-72126, CVE-2026-72129, CVE-2026-72133,\nCVE-2026-72135, CVE-2026-72136, CVE-2026-72138, CVE-2026-72140,\nCVE-2026-72146, CVE-2026-72153, CVE-2026-72159, CVE-2026-72160,\nCVE-2026-72163, CVE-2026-72164, CVE-2026-72165, CVE-2026-72166,\nCVE-2026-72167, CVE-2026-72171, CVE-2026-72181, CVE-2026-72182,\nCVE-2026-72192, CVE-2026-72193, CVE-2026-72194, CVE-2026-72195,\nCVE-2026-72197, CVE-2026-72215, CVE-2026-72218, CVE-2026-72219,\nCVE-2026-72223, CVE-2026-72224, CVE-2026-72225, CVE-2026-72226,\nCVE-2026-72228, CVE-2026-72229, CVE-2026-72230, CVE-2026-72231,\nCVE-2026-72232, CVE-2026-72233, CVE-2026-72234, CVE-2026-72235,\nCVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72245,\nCVE-2026-72247, CVE-2026-72250, CVE-2026-72251, CVE-2026-72256,\nCVE-2026-72264, CVE-2026-72265, CVE-2026-72267, CVE-2026-72268,\nCVE-2026-72269, CVE-2026-72270, CVE-2026-72271, CVE-2026-72272,\nCVE-2026-72274, CVE-2026-72275, CVE-2026-72276, CVE-2026-72282,\nCVE-2026-72289, CVE-2026-72296, CVE-2026-72297, CVE-2026-72298,\nCVE-2026-72306, CVE-2026-72307, CVE-2026-72310, CVE-2026-72314,\nCVE-2026-72316, CVE-2026-72319, CVE-2026-72322, CVE-2026-72326,\nCVE-2026-72339, CVE-2026-72347, CVE-2026-72348, CVE-2026-72349,\nCVE-2026-72350, CVE-2026-72351, CVE-2026-72371, CVE-2026-72374,\nCVE-2026-72378, CVE-2026-72389, CVE-2026-72392, CVE-2026-72396,\nCVE-2026-72400, CVE-2026-72406, CVE-2026-72409, CVE-2026-72414,\nCVE-2026-72418, CVE-2026-72421, CVE-2026-72422, CVE-2026-72428,\nCVE-2026-72433, CVE-2026-72435, CVE-2026-72441, CVE-2026-72447,\nCVE-2026-72448, CVE-2026-72450, CVE-2026-72459, CVE-2026-72460,\nCVE-2026-72466, CVE-2026-72476, CVE-2026-72479, CVE-2026-72481,\nCVE-2026-72483, CVE-2026-72484, CVE-2026-72489, CVE-2026-72491,\nCVE-2026-72492, CVE-2026-72502, CVE-2026-74255, CVE-2026-74256,\nCVE-2026-74262, CVE-2026-74265, CVE-2026-74267, CVE-2026-74276,\nCVE-2026-74279, CVE-2026-74280, CVE-2026-74281, CVE-2026-74282,\nCVE-2026-74283, CVE-2026-74284, CVE-2026-74287, CVE-2026-74288,\nCVE-2026-74292, CVE-2026-74293, CVE-2026-74295, CVE-2026-74297,\nCVE-2026-74305, CVE-2026-74312, CVE-2026-74313, CVE-2026-74320,\nCVE-2026-74321, CVE-2026-74327, CVE-2026-74329, CVE-2026-74330,\nCVE-2026-74331, CVE-2026-74339, CVE-2026-74340, CVE-2026-74346,\nCVE-2026-74348, CVE-2026-74349, CVE-2026-74351, CVE-2026-74359,\nCVE-2026-74363, CVE-2026-74376, CVE-2026-74379, CVE-2026-74382,\nCVE-2026-74384, CVE-2026-74390, CVE-2026-74394, CVE-2026-74395,\nCVE-2026-74398, CVE-2026-74399, CVE-2026-74402, CVE-2026-74408,\nCVE-2026-74410, CVE-2026-74416, CVE-2026-74424, CVE-2026-74426,\nCVE-2026-74427, CVE-2026-74438, CVE-2026-74443, CVE-2026-74444,\nCVE-2026-74453, CVE-2026-74455, CVE-2026-74456, CVE-2026-74457,\nCVE-2026-74458, CVE-2026-74459, CVE-2026-74460, CVE-2026-74461,\nCVE-2026-74463, CVE-2026-74464, CVE-2026-74465, CVE-2026-74467,\nCVE-2026-74468, CVE-2026-74469, CVE-2026-74471, CVE-2026-74473,\nCVE-2026-74475, CVE-2026-74478, CVE-2026-74480, CVE-2026-74481,\nCVE-2026-74482, CVE-2026-74485, CVE-2026-74488, CVE-2026-74490,\nCVE-2026-74492, CVE-2026-74493, CVE-2026-74495, CVE-2026-74497,\nCVE-2026-74498, CVE-2026-74499, CVE-2026-74505, CVE-2026-74507,\nCVE-2026-74508, CVE-2026-74512, CVE-2026-74518, CVE-2026-74519,\nCVE-2026-74523, CVE-2026-74525, CVE-2026-74540, CVE-2026-74546,\nCVE-2026-74547, CVE-2026-74548, CVE-2026-74549, CVE-2026-74556,\nCVE-2026-74557, CVE-2026-74563, CVE-2026-74564, CVE-2026-74566,\nCVE-2026-74567, CVE-2026-74569, CVE-2026-74577, CVE-2026-74578,\nCVE-2026-74579)\n","status":"published","published":"2026-10-06T10:10:23Z","modified":"2026-11-09T12:48:47.443115925Z","updated_at":"2026-11-07T01:56:47.245871Z"},{"id":"USN-8877-1","title":"linux-gcp, linux-gcp-fips vulnerabilities","description":"It was discovered that the i.MX clock driver in the Linux kernel did not\nproperly handle certain memory allocation failure conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2022-3114)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - User-space API (UAPI);\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - Generic PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Reset controller framework;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - KVM subsystem;\n  - Networking core;\n  - Netfilter;\n  - Socket messages infrastructure;\n  - Network sockets;\n  - Memory Management;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IP tunnels definitions;\n  - IPv4 networking;\n  - SCTP protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel futex primitives;\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - ESS Solo-1 ALSA driver;\n  - HD-audio driver;\n  - Simple audio multiplexer codec driver;\n  - SoC Audio for Freescale CPUs drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n(CVE-2023-54125, CVE-2023-54271, CVE-2025-22026, CVE-2025-23131,\nCVE-2025-39863, CVE-2025-39929, CVE-2025-39931, CVE-2026-23364,\nCVE-2026-31449, CVE-2026-31451, CVE-2026-31610, CVE-2026-31700,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31715, CVE-2026-43064, CVE-2026-43216, CVE-2026-43219,\nCVE-2026-43350, CVE-2026-43355, CVE-2026-43491, CVE-2026-43492,\nCVE-2026-45850, CVE-2026-45930, CVE-2026-45991, CVE-2026-45999,\nCVE-2026-46003, CVE-2026-46021, CVE-2026-46026, CVE-2026-46038,\nCVE-2026-46052, CVE-2026-46056, CVE-2026-46065, CVE-2026-46069,\nCVE-2026-46078, CVE-2026-46086, CVE-2026-46090, CVE-2026-46091,\nCVE-2026-46092, CVE-2026-46103, CVE-2026-46116, CVE-2026-46159,\nCVE-2026-46160, CVE-2026-46169, CVE-2026-46180, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46196, CVE-2026-46208, CVE-2026-46252,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46299, CVE-2026-46320,\nCVE-2026-46321, CVE-2026-46322, CVE-2026-52909, CVE-2026-52910,\nCVE-2026-52913, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923,\nCVE-2026-52927, CVE-2026-52928, CVE-2026-52929, CVE-2026-52930,\nCVE-2026-52933, CVE-2026-52934, CVE-2026-52935, CVE-2026-52939,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52947, CVE-2026-52948,\nCVE-2026-52977, CVE-2026-53080, CVE-2026-53090, CVE-2026-53133,\nCVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53139, CVE-2026-53146, CVE-2026-53148,\nCVE-2026-53149, CVE-2026-53150, CVE-2026-53157, CVE-2026-53158,\nCVE-2026-53159, CVE-2026-53161, CVE-2026-53163, CVE-2026-53167,\nCVE-2026-53168, CVE-2026-53177, CVE-2026-53181, CVE-2026-53189,\nCVE-2026-53194, CVE-2026-53195, CVE-2026-53196, CVE-2026-53199,\nCVE-2026-53208, CVE-2026-53213, CVE-2026-53217, CVE-2026-53218,\nCVE-2026-53219, CVE-2026-53223, CVE-2026-53227, CVE-2026-53238,\nCVE-2026-53239, CVE-2026-53245, CVE-2026-53249, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53273,\nCVE-2026-53275, CVE-2026-53325, CVE-2026-53329, CVE-2026-53331,\nCVE-2026-53332, CVE-2026-53337, CVE-2026-53339, CVE-2026-53352,\nCVE-2026-53356, CVE-2026-53357, CVE-2026-53358, CVE-2026-53381,\nCVE-2026-53382, CVE-2026-53383, CVE-2026-53385, CVE-2026-53388,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53397,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63796, CVE-2026-63798, CVE-2026-63801,\nCVE-2026-63803, CVE-2026-63806, CVE-2026-63807, CVE-2026-63809,\nCVE-2026-63810, CVE-2026-63814, CVE-2026-63815, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63822, CVE-2026-63823, CVE-2026-63824,\nCVE-2026-63827, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830,\nCVE-2026-63831, CVE-2026-63833, CVE-2026-63834, CVE-2026-63835,\nCVE-2026-63836, CVE-2026-63867, CVE-2026-63868, CVE-2026-63870,\nCVE-2026-63875, CVE-2026-63889, CVE-2026-63890, CVE-2026-63891,\nCVE-2026-63892, CVE-2026-63893, CVE-2026-63895, CVE-2026-63897,\nCVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901,\nCVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905,\nCVE-2026-63908, CVE-2026-63913, CVE-2026-63914, CVE-2026-63915,\nCVE-2026-63916, CVE-2026-63917, CVE-2026-63919, CVE-2026-63920,\nCVE-2026-63921, CVE-2026-63925, CVE-2026-63926, CVE-2026-63927,\nCVE-2026-63928, CVE-2026-63930, CVE-2026-63931, CVE-2026-63933,\nCVE-2026-63934, CVE-2026-63942, CVE-2026-63947, CVE-2026-63948,\nCVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63960,\nCVE-2026-63961, CVE-2026-63964, CVE-2026-63967, CVE-2026-63971,\nCVE-2026-63975, CVE-2026-63976, CVE-2026-63985, CVE-2026-63990,\nCVE-2026-63991, CVE-2026-64002, CVE-2026-64004, CVE-2026-64005,\nCVE-2026-64009, CVE-2026-64010, CVE-2026-64011, CVE-2026-64012,\nCVE-2026-64014, CVE-2026-64090, CVE-2026-64093, CVE-2026-64094,\nCVE-2026-64095, CVE-2026-64116, CVE-2026-64118, CVE-2026-64123,\nCVE-2026-64126, CVE-2026-64137, CVE-2026-64170, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64206,\nCVE-2026-64222, CVE-2026-64225, CVE-2026-64234, CVE-2026-64237,\nCVE-2026-64242, CVE-2026-64243, CVE-2026-64246, CVE-2026-64249,\nCVE-2026-64266, CVE-2026-64268, CVE-2026-64269, CVE-2026-64271,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64279, CVE-2026-64296, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64301, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64340, CVE-2026-64342, CVE-2026-64343, CVE-2026-64344,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64355, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,\nCVE-2026-64374, CVE-2026-64375, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64390, CVE-2026-64401, CVE-2026-64403,\nCVE-2026-64408, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,\nCVE-2026-64420, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425,\nCVE-2026-64428, CVE-2026-64429, CVE-2026-64430, CVE-2026-64432,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64440,\nCVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444,\nCVE-2026-64445, CVE-2026-64446, CVE-2026-64448, CVE-2026-64450,\nCVE-2026-64452, CVE-2026-64454, CVE-2026-64455, CVE-2026-64456,\nCVE-2026-64461, CVE-2026-64462, CVE-2026-64465, CVE-2026-64468,\nCVE-2026-64469, CVE-2026-64470, CVE-2026-64471, CVE-2026-64475,\nCVE-2026-64478, CVE-2026-64483, CVE-2026-64484, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64494, CVE-2026-64495, CVE-2026-64496,\nCVE-2026-64497, CVE-2026-64500, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64510, CVE-2026-64512, CVE-2026-64514,\nCVE-2026-64524, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534,\nCVE-2026-64535, CVE-2026-64536, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64540, CVE-2026-64541, CVE-2026-64543, CVE-2026-64544,\nCVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548,\nCVE-2026-64549, CVE-2026-64550, CVE-2026-64551, CVE-2026-64553,\nCVE-2026-64554, CVE-2026-64560, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64569,\nCVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64576,\nCVE-2026-64578, CVE-2026-64579, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64593, CVE-2026-64594, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64602, CVE-2026-64604, CVE-2026-68088,\nCVE-2026-68090, CVE-2026-68091, CVE-2026-68104, CVE-2026-68106,\nCVE-2026-68111, CVE-2026-68115, CVE-2026-68117, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68125, CVE-2026-68127, CVE-2026-68129,\nCVE-2026-68131, CVE-2026-68135, CVE-2026-68137, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68151, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155,\nCVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68160,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68180, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68190, CVE-2026-68192, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68204,\nCVE-2026-68209, CVE-2026-68212, CVE-2026-68213, CVE-2026-68214,\nCVE-2026-68215, CVE-2026-68216, CVE-2026-68217, CVE-2026-68218,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68229, CVE-2026-68231, CVE-2026-68234, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68248, CVE-2026-68249, CVE-2026-68250,\nCVE-2026-68284, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68304, CVE-2026-68309,\nCVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68331, CVE-2026-68333, CVE-2026-68335,\nCVE-2026-68338, CVE-2026-68340, CVE-2026-68349, CVE-2026-68350,\nCVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354,\nCVE-2026-68355, CVE-2026-68357, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,\nCVE-2026-68369, CVE-2026-68370, CVE-2026-68373, CVE-2026-68376,\nCVE-2026-68377, CVE-2026-68388, CVE-2026-68395, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68402, CVE-2026-68403, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68410, CVE-2026-68411, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68417, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68428, CVE-2026-68430, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68444, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450,\nCVE-2026-68451, CVE-2026-68452, CVE-2026-68456, CVE-2026-68459,\nCVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72010, CVE-2026-72013, CVE-2026-72014,\nCVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72033, CVE-2026-72036,\nCVE-2026-72038, CVE-2026-72039, CVE-2026-72046, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72052, CVE-2026-72054,\nCVE-2026-72055, CVE-2026-72056, CVE-2026-72061, CVE-2026-72066,\nCVE-2026-72067, CVE-2026-72068, CVE-2026-72074, CVE-2026-72076,\nCVE-2026-72078, CVE-2026-72079, CVE-2026-72081, CVE-2026-72082,\nCVE-2026-72083, CVE-2026-72084, CVE-2026-72085, CVE-2026-72086,\nCVE-2026-72088, CVE-2026-72102, CVE-2026-72105, CVE-2026-72107,\nCVE-2026-72108, CVE-2026-72109, CVE-2026-72113, CVE-2026-72114,\nCVE-2026-72115, CVE-2026-72116, CVE-2026-72117, CVE-2026-72118,\nCVE-2026-72119, CVE-2026-72120, CVE-2026-72121, CVE-2026-72122,\nCVE-2026-72123, CVE-2026-72124, CVE-2026-72125, CVE-2026-72126,\nCVE-2026-72129, CVE-2026-72133, CVE-2026-72135, CVE-2026-72136,\nCVE-2026-72138, CVE-2026-72140, CVE-2026-72146, CVE-2026-72153,\nCVE-2026-72159, CVE-2026-72160, CVE-2026-72163, CVE-2026-72164,\nCVE-2026-72165, CVE-2026-72166, CVE-2026-72167, CVE-2026-72171,\nCVE-2026-72181, CVE-2026-72182, CVE-2026-72192, CVE-2026-72193,\nCVE-2026-72194, CVE-2026-72195, CVE-2026-72197, CVE-2026-72215,\nCVE-2026-72218, CVE-2026-72219, CVE-2026-72223, CVE-2026-72224,\nCVE-2026-72225, CVE-2026-72226, CVE-2026-72228, CVE-2026-72229,\nCVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233,\nCVE-2026-72234, CVE-2026-72235, CVE-2026-72238, CVE-2026-72240,\nCVE-2026-72241, CVE-2026-72245, CVE-2026-72247, CVE-2026-72250,\nCVE-2026-72251, CVE-2026-72256, CVE-2026-72264, CVE-2026-72265,\nCVE-2026-72267, CVE-2026-72268, CVE-2026-72269, CVE-2026-72270,\nCVE-2026-72271, CVE-2026-72272, CVE-2026-72274, CVE-2026-72275,\nCVE-2026-72276, CVE-2026-72282, CVE-2026-72289, CVE-2026-72296,\nCVE-2026-72297, CVE-2026-72298, CVE-2026-72306, CVE-2026-72307,\nCVE-2026-72310, CVE-2026-72314, CVE-2026-72316, CVE-2026-72319,\nCVE-2026-72322, CVE-2026-72326, CVE-2026-72339, CVE-2026-72347,\nCVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351,\nCVE-2026-72371, CVE-2026-72374, CVE-2026-72378, CVE-2026-72389,\nCVE-2026-72392, CVE-2026-72396, CVE-2026-72400, CVE-2026-72406,\nCVE-2026-72409, CVE-2026-72414, CVE-2026-72418, CVE-2026-72421,\nCVE-2026-72422, CVE-2026-72428, CVE-2026-72433, CVE-2026-72435,\nCVE-2026-72441, CVE-2026-72447, CVE-2026-72448, CVE-2026-72450,\nCVE-2026-72459, CVE-2026-72460, CVE-2026-72466, CVE-2026-72476,\nCVE-2026-72479, CVE-2026-72481, CVE-2026-72483, CVE-2026-72484,\nCVE-2026-72489, CVE-2026-72491, CVE-2026-72492, CVE-2026-72502,\nCVE-2026-74255, CVE-2026-74256, CVE-2026-74262, CVE-2026-74265,\nCVE-2026-74267, CVE-2026-74276, CVE-2026-74279, CVE-2026-74280,\nCVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284,\nCVE-2026-74287, CVE-2026-74288, CVE-2026-74292, CVE-2026-74293,\nCVE-2026-74295, CVE-2026-74297, CVE-2026-74305, CVE-2026-74312,\nCVE-2026-74313, CVE-2026-74320, CVE-2026-74321, CVE-2026-74327,\nCVE-2026-74329, CVE-2026-74330, CVE-2026-74331, CVE-2026-74339,\nCVE-2026-74340, CVE-2026-74346, CVE-2026-74348, CVE-2026-74349,\nCVE-2026-74351, CVE-2026-74359, CVE-2026-74363, CVE-2026-74376,\nCVE-2026-74379, CVE-2026-74382, CVE-2026-74384, CVE-2026-74390,\nCVE-2026-74394, CVE-2026-74395, CVE-2026-74398, CVE-2026-74399,\nCVE-2026-74402, CVE-2026-74408, CVE-2026-74410, CVE-2026-74416,\nCVE-2026-74424, CVE-2026-74426, CVE-2026-74427, CVE-2026-74438,\nCVE-2026-74443, CVE-2026-74444, CVE-2026-74453, CVE-2026-74455,\nCVE-2026-74456, CVE-2026-74457, CVE-2026-74458, CVE-2026-74459,\nCVE-2026-74460, CVE-2026-74461, CVE-2026-74463, CVE-2026-74464,\nCVE-2026-74465, CVE-2026-74467, CVE-2026-74468, CVE-2026-74469,\nCVE-2026-74471, CVE-2026-74473, CVE-2026-74475, CVE-2026-74478,\nCVE-2026-74480, CVE-2026-74481, CVE-2026-74482, CVE-2026-74485,\nCVE-2026-74488, CVE-2026-74490, CVE-2026-74492, CVE-2026-74493,\nCVE-2026-74495, CVE-2026-74497, CVE-2026-74498, CVE-2026-74499,\nCVE-2026-74505, CVE-2026-74507, CVE-2026-74508, CVE-2026-74512,\nCVE-2026-74518, CVE-2026-74519, CVE-2026-74523, CVE-2026-74525,\nCVE-2026-74540, CVE-2026-74546, CVE-2026-74547, CVE-2026-74548,\nCVE-2026-74549, CVE-2026-74556, CVE-2026-74557, CVE-2026-74563,\nCVE-2026-74564, CVE-2026-74566, CVE-2026-74567, CVE-2026-74569,\nCVE-2026-74577, CVE-2026-74578, CVE-2026-74579, CVE-2026-74580,\nCVE-2026-74581, CVE-2026-74583, CVE-2026-74584, CVE-2026-74585,\nCVE-2026-74586, CVE-2026-74587, CVE-2026-74588, CVE-2026-74589,\nCVE-2026-74597, CVE-2026-74598, CVE-2026-74604, CVE-2026-74609,\nCVE-2026-74613, CVE-2026-74614, CVE-2026-74615, CVE-2026-74616,\nCVE-2026-74620, CVE-2026-74622, CVE-2026-74625, CVE-2026-74630,\nCVE-2026-74635, CVE-2026-74636, CVE-2026-74641, CVE-2026-74648,\nCVE-2026-74649, CVE-2026-74650, CVE-2026-74651, CVE-2026-74654,\nCVE-2026-74656, CVE-2026-74657, CVE-2026-74658, CVE-2026-74659,\nCVE-2026-74660, CVE-2026-74664, CVE-2026-74667, CVE-2026-74669,\nCVE-2026-74671, CVE-2026-74673, CVE-2026-74675, CVE-2026-74676,\nCVE-2026-74679, CVE-2026-74680, CVE-2026-74682, CVE-2026-74683,\nCVE-2026-74688, CVE-2026-74691, CVE-2026-74692, CVE-2026-74693,\nCVE-2026-74694, CVE-2026-74696, CVE-2026-74697, CVE-2026-74701,\nCVE-2026-74704, CVE-2026-74705, CVE-2026-74717, CVE-2026-74719,\nCVE-2026-74720, CVE-2026-74726, CVE-2026-74730, CVE-2026-80591,\nCVE-2026-80593, CVE-2026-80594, CVE-2026-80595, CVE-2026-80597,\nCVE-2026-80598, CVE-2026-80599, CVE-2026-80600, CVE-2026-80601,\nCVE-2026-80603, CVE-2026-80605, CVE-2026-80609, CVE-2026-80613,\nCVE-2026-80619, CVE-2026-80622, CVE-2026-80626, CVE-2026-80627,\nCVE-2026-80630, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646,\nCVE-2026-80647, CVE-2026-80649, CVE-2026-80652, CVE-2026-80659,\nCVE-2026-80664, CVE-2026-80677, CVE-2026-80679, CVE-2026-80680,\nCVE-2026-80681, CVE-2026-80706, CVE-2026-80707, CVE-2026-80708,\nCVE-2026-80714, CVE-2026-80716, CVE-2026-80717, CVE-2026-80718,\nCVE-2026-80722, CVE-2026-80731, CVE-2026-80732, CVE-2026-80733,\nCVE-2026-80867, CVE-2026-80875, CVE-2026-80876, CVE-2026-80877,\nCVE-2026-80879, CVE-2026-80880, CVE-2026-80881, CVE-2026-80886,\nCVE-2026-80890, CVE-2026-80902, CVE-2026-89774)\n","status":"published","published":"2026-10-06T10:10:41Z","modified":"2026-11-09T12:49:18.170833445Z","updated_at":"2026-11-07T01:56:47.245871Z"},{"id":"USN-8878-1","title":"linux-gcp-5.15 vulnerabilities","description":"It was discovered that the i.MX clock driver in the Linux kernel did not\nproperly handle certain memory allocation failure conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2022-3114)\n\nIt was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - User-space API (UAPI);\n  - ARM32 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - Generic PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Reset controller framework;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - KVM subsystem;\n  - Networking core;\n  - Netfilter;\n  - Socket messages infrastructure;\n  - Network sockets;\n  - Memory Management;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IP tunnels definitions;\n  - IPv4 networking;\n  - SCTP protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel futex primitives;\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - ESS Solo-1 ALSA driver;\n  - HD-audio driver;\n  - Simple audio multiplexer codec driver;\n  - SoC Audio for Freescale CPUs drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n(CVE-2023-54125, CVE-2023-54271, CVE-2025-22026, CVE-2025-23131,\nCVE-2025-39863, CVE-2025-39929, CVE-2025-39931, CVE-2026-23364,\nCVE-2026-31449, CVE-2026-31451, CVE-2026-31610, CVE-2026-31700,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31715, CVE-2026-43064, CVE-2026-43216, CVE-2026-43219,\nCVE-2026-43350, CVE-2026-43355, CVE-2026-43491, CVE-2026-43492,\nCVE-2026-45850, CVE-2026-45930, CVE-2026-45991, CVE-2026-45999,\nCVE-2026-46003, CVE-2026-46021, CVE-2026-46026, CVE-2026-46038,\nCVE-2026-46052, CVE-2026-46056, CVE-2026-46065, CVE-2026-46069,\nCVE-2026-46078, CVE-2026-46086, CVE-2026-46090, CVE-2026-46091,\nCVE-2026-46092, CVE-2026-46103, CVE-2026-46116, CVE-2026-46159,\nCVE-2026-46160, CVE-2026-46169, CVE-2026-46180, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46196, CVE-2026-46208, CVE-2026-46252,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46299, CVE-2026-46320,\nCVE-2026-46321, CVE-2026-46322, CVE-2026-52909, CVE-2026-52910,\nCVE-2026-52913, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923,\nCVE-2026-52927, CVE-2026-52928, CVE-2026-52929, CVE-2026-52930,\nCVE-2026-52933, CVE-2026-52934, CVE-2026-52935, CVE-2026-52939,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52947, CVE-2026-52948,\nCVE-2026-52977, CVE-2026-53080, CVE-2026-53090, CVE-2026-53131,\nCVE-2026-53133, CVE-2026-53134, CVE-2026-53135, CVE-2026-53136,\nCVE-2026-53137, CVE-2026-53138, CVE-2026-53139, CVE-2026-53146,\nCVE-2026-53148, CVE-2026-53149, CVE-2026-53150, CVE-2026-53157,\nCVE-2026-53158, CVE-2026-53159, CVE-2026-53161, CVE-2026-53163,\nCVE-2026-53167, CVE-2026-53168, CVE-2026-53177, CVE-2026-53181,\nCVE-2026-53186, CVE-2026-53189, CVE-2026-53194, CVE-2026-53195,\nCVE-2026-53196, CVE-2026-53199, CVE-2026-53208, CVE-2026-53213,\nCVE-2026-53216, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53221, CVE-2026-53223, CVE-2026-53227, CVE-2026-53238,\nCVE-2026-53239, CVE-2026-53245, CVE-2026-53249, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53273,\nCVE-2026-53275, CVE-2026-53325, CVE-2026-53329, CVE-2026-53331,\nCVE-2026-53332, CVE-2026-53337, CVE-2026-53339, CVE-2026-53352,\nCVE-2026-53354, CVE-2026-53355, CVE-2026-53356, CVE-2026-53357,\nCVE-2026-53358, CVE-2026-53381, CVE-2026-53382, CVE-2026-53383,\nCVE-2026-53385, CVE-2026-53388, CVE-2026-53391, CVE-2026-53392,\nCVE-2026-53393, CVE-2026-53397, CVE-2026-53398, CVE-2026-53399,\nCVE-2026-53400, CVE-2026-53402, CVE-2026-53403, CVE-2026-63794,\nCVE-2026-63796, CVE-2026-63798, CVE-2026-63800, CVE-2026-63801,\nCVE-2026-63803, CVE-2026-63806, CVE-2026-63807, CVE-2026-63808,\nCVE-2026-63809, CVE-2026-63810, CVE-2026-63814, CVE-2026-63815,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63822, CVE-2026-63823,\nCVE-2026-63824, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829,\nCVE-2026-63830, CVE-2026-63831, CVE-2026-63833, CVE-2026-63834,\nCVE-2026-63835, CVE-2026-63836, CVE-2026-63867, CVE-2026-63868,\nCVE-2026-63870, CVE-2026-63875, CVE-2026-63887, CVE-2026-63888,\nCVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,\nCVE-2026-63893, CVE-2026-63895, CVE-2026-63897, CVE-2026-63898,\nCVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,\nCVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63908,\nCVE-2026-63912, CVE-2026-63913, CVE-2026-63914, CVE-2026-63915,\nCVE-2026-63916, CVE-2026-63917, CVE-2026-63919, CVE-2026-63920,\nCVE-2026-63921, CVE-2026-63922, CVE-2026-63924, CVE-2026-63925,\nCVE-2026-63926, CVE-2026-63927, CVE-2026-63928, CVE-2026-63930,\nCVE-2026-63931, CVE-2026-63933, CVE-2026-63934, CVE-2026-63942,\nCVE-2026-63947, CVE-2026-63948, CVE-2026-63954, CVE-2026-63956,\nCVE-2026-63957, CVE-2026-63960, CVE-2026-63961, CVE-2026-63964,\nCVE-2026-63967, CVE-2026-63971, CVE-2026-63975, CVE-2026-63976,\nCVE-2026-63984, CVE-2026-63985, CVE-2026-63990, CVE-2026-63991,\nCVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64002,\nCVE-2026-64004, CVE-2026-64005, CVE-2026-64007, CVE-2026-64009,\nCVE-2026-64010, CVE-2026-64011, CVE-2026-64012, CVE-2026-64014,\nCVE-2026-64090, CVE-2026-64091, CVE-2026-64093, CVE-2026-64094,\nCVE-2026-64095, CVE-2026-64116, CVE-2026-64118, CVE-2026-64123,\nCVE-2026-64126, CVE-2026-64137, CVE-2026-64170, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64206,\nCVE-2026-64222, CVE-2026-64225, CVE-2026-64234, CVE-2026-64237,\nCVE-2026-64242, CVE-2026-64243, CVE-2026-64246, CVE-2026-64249,\nCVE-2026-64266, CVE-2026-64268, CVE-2026-64269, CVE-2026-64271,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64279, CVE-2026-64296, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64301, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64340, CVE-2026-64342, CVE-2026-64343, CVE-2026-64344,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64355, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,\nCVE-2026-64374, CVE-2026-64375, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64390, CVE-2026-64401, CVE-2026-64403,\nCVE-2026-64408, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,\nCVE-2026-64420, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425,\nCVE-2026-64428, CVE-2026-64429, CVE-2026-64430, CVE-2026-64432,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64440,\nCVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444,\nCVE-2026-64445, CVE-2026-64446, CVE-2026-64448, CVE-2026-64450,\nCVE-2026-64452, CVE-2026-64454, CVE-2026-64455, CVE-2026-64456,\nCVE-2026-64461, CVE-2026-64462, CVE-2026-64465, CVE-2026-64468,\nCVE-2026-64469, CVE-2026-64470, CVE-2026-64471, CVE-2026-64475,\nCVE-2026-64478, CVE-2026-64483, CVE-2026-64484, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64494, CVE-2026-64495, CVE-2026-64496,\nCVE-2026-64497, CVE-2026-64500, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64510, CVE-2026-64512, CVE-2026-64514,\nCVE-2026-64524, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534,\nCVE-2026-64535, CVE-2026-64536, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64540, CVE-2026-64541, CVE-2026-64543, CVE-2026-64544,\nCVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548,\nCVE-2026-64549, CVE-2026-64550, CVE-2026-64551, CVE-2026-64553,\nCVE-2026-64554, CVE-2026-64560, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64569,\nCVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64576,\nCVE-2026-64578, CVE-2026-64579, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64593, CVE-2026-64594, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64602, CVE-2026-64604, CVE-2026-68088,\nCVE-2026-68090, CVE-2026-68091, CVE-2026-68104, CVE-2026-68106,\nCVE-2026-68111, CVE-2026-68115, CVE-2026-68117, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68125, CVE-2026-68127, CVE-2026-68129,\nCVE-2026-68131, CVE-2026-68135, CVE-2026-68137, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68151, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155,\nCVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68160,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68180, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68190, CVE-2026-68192, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68204,\nCVE-2026-68209, CVE-2026-68212, CVE-2026-68213, CVE-2026-68214,\nCVE-2026-68215, CVE-2026-68216, CVE-2026-68217, CVE-2026-68218,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68229, CVE-2026-68231, CVE-2026-68234, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68248, CVE-2026-68249, CVE-2026-68250,\nCVE-2026-68284, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68304, CVE-2026-68309,\nCVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68331, CVE-2026-68333, CVE-2026-68335,\nCVE-2026-68338, CVE-2026-68340, CVE-2026-68349, CVE-2026-68350,\nCVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354,\nCVE-2026-68355, CVE-2026-68357, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,\nCVE-2026-68369, CVE-2026-68370, CVE-2026-68373, CVE-2026-68376,\nCVE-2026-68377, CVE-2026-68388, CVE-2026-68395, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68402, CVE-2026-68403, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68410, CVE-2026-68411, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68417, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68428, CVE-2026-68430, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68444, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450,\nCVE-2026-68451, CVE-2026-68452, CVE-2026-68456, CVE-2026-68459,\nCVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72010, CVE-2026-72013, CVE-2026-72014,\nCVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72033, CVE-2026-72036,\nCVE-2026-72038, CVE-2026-72039, CVE-2026-72046, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72052, CVE-2026-72054,\nCVE-2026-72055, CVE-2026-72056, CVE-2026-72061, CVE-2026-72066,\nCVE-2026-72067, CVE-2026-72068, CVE-2026-72074, CVE-2026-72076,\nCVE-2026-72078, CVE-2026-72079, CVE-2026-72081, CVE-2026-72082,\nCVE-2026-72083, CVE-2026-72084, CVE-2026-72085, CVE-2026-72086,\nCVE-2026-72088, CVE-2026-72102, CVE-2026-72105, CVE-2026-72107,\nCVE-2026-72108, CVE-2026-72109, CVE-2026-72113, CVE-2026-72114,\nCVE-2026-72115, CVE-2026-72116, CVE-2026-72117, CVE-2026-72118,\nCVE-2026-72119, CVE-2026-72120, CVE-2026-72121, CVE-2026-72122,\nCVE-2026-72123, CVE-2026-72124, CVE-2026-72125, CVE-2026-72126,\nCVE-2026-72129, CVE-2026-72133, CVE-2026-72135, CVE-2026-72136,\nCVE-2026-72138, CVE-2026-72140, CVE-2026-72146, CVE-2026-72153,\nCVE-2026-72159, CVE-2026-72160, CVE-2026-72163, CVE-2026-72164,\nCVE-2026-72165, CVE-2026-72166, CVE-2026-72167, CVE-2026-72171,\nCVE-2026-72181, CVE-2026-72182, CVE-2026-72192, CVE-2026-72193,\nCVE-2026-72194, CVE-2026-72195, CVE-2026-72197, CVE-2026-72215,\nCVE-2026-72218, CVE-2026-72219, CVE-2026-72223, CVE-2026-72224,\nCVE-2026-72225, CVE-2026-72226, CVE-2026-72228, CVE-2026-72229,\nCVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233,\nCVE-2026-72234, CVE-2026-72235, CVE-2026-72238, CVE-2026-72240,\nCVE-2026-72241, CVE-2026-72245, CVE-2026-72247, CVE-2026-72250,\nCVE-2026-72251, CVE-2026-72256, CVE-2026-72264, CVE-2026-72265,\nCVE-2026-72267, CVE-2026-72268, CVE-2026-72269, CVE-2026-72270,\nCVE-2026-72271, CVE-2026-72272, CVE-2026-72274, CVE-2026-72275,\nCVE-2026-72276, CVE-2026-72282, CVE-2026-72289, CVE-2026-72296,\nCVE-2026-72297, CVE-2026-72298, CVE-2026-72306, CVE-2026-72307,\nCVE-2026-72310, CVE-2026-72314, CVE-2026-72316, CVE-2026-72319,\nCVE-2026-72322, CVE-2026-72326, CVE-2026-72339, CVE-2026-72347,\nCVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351,\nCVE-2026-72371, CVE-2026-72374, CVE-2026-72378, CVE-2026-72389,\nCVE-2026-72392, CVE-2026-72396, CVE-2026-72400, CVE-2026-72406,\nCVE-2026-72409, CVE-2026-72414, CVE-2026-72418, CVE-2026-72421,\nCVE-2026-72422, CVE-2026-72428, CVE-2026-72433, CVE-2026-72435,\nCVE-2026-72441, CVE-2026-72447, CVE-2026-72448, CVE-2026-72450,\nCVE-2026-72459, CVE-2026-72460, CVE-2026-72466, CVE-2026-72476,\nCVE-2026-72479, CVE-2026-72481, CVE-2026-72483, CVE-2026-72484,\nCVE-2026-72489, CVE-2026-72491, CVE-2026-72492, CVE-2026-72502,\nCVE-2026-74255, CVE-2026-74256, CVE-2026-74262, CVE-2026-74265,\nCVE-2026-74267, CVE-2026-74276, CVE-2026-74279, CVE-2026-74280,\nCVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284,\nCVE-2026-74287, CVE-2026-74288, CVE-2026-74292, CVE-2026-74293,\nCVE-2026-74295, CVE-2026-74297, CVE-2026-74305, CVE-2026-74312,\nCVE-2026-74313, CVE-2026-74320, CVE-2026-74321, CVE-2026-74327,\nCVE-2026-74329, CVE-2026-74330, CVE-2026-74331, CVE-2026-74339,\nCVE-2026-74340, CVE-2026-74346, CVE-2026-74348, CVE-2026-74349,\nCVE-2026-74351, CVE-2026-74359, CVE-2026-74363, CVE-2026-74376,\nCVE-2026-74379, CVE-2026-74382, CVE-2026-74384, CVE-2026-74390,\nCVE-2026-74394, CVE-2026-74395, CVE-2026-74398, CVE-2026-74399,\nCVE-2026-74402, CVE-2026-74408, CVE-2026-74410, CVE-2026-74416,\nCVE-2026-74424, CVE-2026-74426, CVE-2026-74427, CVE-2026-74438,\nCVE-2026-74443, CVE-2026-74444, CVE-2026-74453, CVE-2026-74455,\nCVE-2026-74456, CVE-2026-74457, CVE-2026-74458, CVE-2026-74459,\nCVE-2026-74460, CVE-2026-74461, CVE-2026-74463, CVE-2026-74464,\nCVE-2026-74465, CVE-2026-74467, CVE-2026-74468, CVE-2026-74469,\nCVE-2026-74471, CVE-2026-74473, CVE-2026-74475, CVE-2026-74478,\nCVE-2026-74480, CVE-2026-74481, CVE-2026-74482, CVE-2026-74485,\nCVE-2026-74488, CVE-2026-74490, CVE-2026-74492, CVE-2026-74493,\nCVE-2026-74495, CVE-2026-74497, CVE-2026-74498, CVE-2026-74499,\nCVE-2026-74505, CVE-2026-74507, CVE-2026-74508, CVE-2026-74512,\nCVE-2026-74518, CVE-2026-74519, CVE-2026-74523, CVE-2026-74525,\nCVE-2026-74540, CVE-2026-74546, CVE-2026-74547, CVE-2026-74548,\nCVE-2026-74549, CVE-2026-74556, CVE-2026-74557, CVE-2026-74563,\nCVE-2026-74564, CVE-2026-74566, CVE-2026-74567, CVE-2026-74569,\nCVE-2026-74577, CVE-2026-74578, CVE-2026-74579, CVE-2026-74580,\nCVE-2026-74581, CVE-2026-74583, CVE-2026-74584, CVE-2026-74585,\nCVE-2026-74586, CVE-2026-74587, CVE-2026-74588, CVE-2026-74589,\nCVE-2026-74597, CVE-2026-74598, CVE-2026-74604, CVE-2026-74609,\nCVE-2026-74613, CVE-2026-74614, CVE-2026-74615, CVE-2026-74616,\nCVE-2026-74620, CVE-2026-74622, CVE-2026-74625, CVE-2026-74630,\nCVE-2026-74635, CVE-2026-74636, CVE-2026-74641, CVE-2026-74648,\nCVE-2026-74649, CVE-2026-74650, CVE-2026-74651, CVE-2026-74654,\nCVE-2026-74656, CVE-2026-74657, CVE-2026-74658, CVE-2026-74659,\nCVE-2026-74660, CVE-2026-74664, CVE-2026-74667, CVE-2026-74669,\nCVE-2026-74671, CVE-2026-74673, CVE-2026-74675, CVE-2026-74676,\nCVE-2026-74679, CVE-2026-74680, CVE-2026-74682, CVE-2026-74683,\nCVE-2026-74688, CVE-2026-74691, CVE-2026-74692, CVE-2026-74693,\nCVE-2026-74694, CVE-2026-74696, CVE-2026-74697, CVE-2026-74701,\nCVE-2026-74704, CVE-2026-74705, CVE-2026-74717, CVE-2026-74719,\nCVE-2026-74720, CVE-2026-74726, CVE-2026-74730, CVE-2026-80591,\nCVE-2026-80593, CVE-2026-80594, CVE-2026-80595, CVE-2026-80597,\nCVE-2026-80598, CVE-2026-80599, CVE-2026-80600, CVE-2026-80601,\nCVE-2026-80603, CVE-2026-80605, CVE-2026-80609, CVE-2026-80613,\nCVE-2026-80619, CVE-2026-80622, CVE-2026-80626, CVE-2026-80627,\nCVE-2026-80630, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646,\nCVE-2026-80647, CVE-2026-80649, CVE-2026-80652, CVE-2026-80659,\nCVE-2026-80664, CVE-2026-80677, CVE-2026-80679, CVE-2026-80680,\nCVE-2026-80681, CVE-2026-80706, CVE-2026-80707, CVE-2026-80708,\nCVE-2026-80714, CVE-2026-80716, CVE-2026-80717, CVE-2026-80718,\nCVE-2026-80722, CVE-2026-80731, CVE-2026-80732, CVE-2026-80733,\nCVE-2026-80867, CVE-2026-80875, CVE-2026-80876, CVE-2026-80877,\nCVE-2026-80879, CVE-2026-80880, CVE-2026-80881, CVE-2026-80886,\nCVE-2026-80890, CVE-2026-80902, CVE-2026-89774)\n","status":"published","published":"2026-10-06T10:10:43Z","modified":"2026-11-09T12:48:26.33662059Z","updated_at":"2026-11-07T01:56:47.245871Z"},{"id":"USN-8879-1","title":"linux-oracle-5.15 vulnerabilities","description":"It was discovered that the i.MX clock driver in the Linux kernel did not\nproperly handle certain memory allocation failure conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2022-3114)\n\nIt was discovered that some Arm processors could complete a broadcast\ntranslation lookaside buffer (TLB) invalidation before memory writes made\nthrough the invalidated translation were globally observed. A local\nattacker could possibly use this to write to memory after permission to do\nso had been revoked, bypassing memory protections or escalating privileges.\n(CVE-2025-10263)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - User-space API (UAPI);\n  - ARM32 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - Generic PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Reset controller framework;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - KVM subsystem;\n  - Networking core;\n  - Netfilter;\n  - Socket messages infrastructure;\n  - Network sockets;\n  - Memory Management;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IP tunnels definitions;\n  - IPv4 networking;\n  - SCTP protocol;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel futex primitives;\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NetLabel subsystem;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - FireWire sound drivers;\n  - ESS Solo-1 ALSA driver;\n  - HD-audio driver;\n  - Simple audio multiplexer codec driver;\n  - SoC Audio for Freescale CPUs drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n(CVE-2023-54125, CVE-2023-54271, CVE-2025-22026, CVE-2025-23131,\nCVE-2025-39863, CVE-2025-39929, CVE-2025-39931, CVE-2026-23364,\nCVE-2026-31449, CVE-2026-31451, CVE-2026-31610, CVE-2026-31700,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31715, CVE-2026-43064, CVE-2026-43216, CVE-2026-43219,\nCVE-2026-43350, CVE-2026-43355, CVE-2026-43491, CVE-2026-43492,\nCVE-2026-45850, CVE-2026-45930, CVE-2026-45991, CVE-2026-45999,\nCVE-2026-46003, CVE-2026-46021, CVE-2026-46026, CVE-2026-46038,\nCVE-2026-46052, CVE-2026-46056, CVE-2026-46065, CVE-2026-46069,\nCVE-2026-46078, CVE-2026-46086, CVE-2026-46090, CVE-2026-46091,\nCVE-2026-46092, CVE-2026-46103, CVE-2026-46116, CVE-2026-46159,\nCVE-2026-46160, CVE-2026-46169, CVE-2026-46180, CVE-2026-46191,\nCVE-2026-46193, CVE-2026-46196, CVE-2026-46208, CVE-2026-46252,\nCVE-2026-46291, CVE-2026-46292, CVE-2026-46299, CVE-2026-46320,\nCVE-2026-46321, CVE-2026-46322, CVE-2026-52909, CVE-2026-52910,\nCVE-2026-52913, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923,\nCVE-2026-52927, CVE-2026-52928, CVE-2026-52929, CVE-2026-52930,\nCVE-2026-52933, CVE-2026-52934, CVE-2026-52935, CVE-2026-52939,\nCVE-2026-52942, CVE-2026-52943, CVE-2026-52947, CVE-2026-52948,\nCVE-2026-52977, CVE-2026-53080, CVE-2026-53090, CVE-2026-53131,\nCVE-2026-53133, CVE-2026-53134, CVE-2026-53135, CVE-2026-53136,\nCVE-2026-53137, CVE-2026-53138, CVE-2026-53139, CVE-2026-53146,\nCVE-2026-53148, CVE-2026-53149, CVE-2026-53150, CVE-2026-53157,\nCVE-2026-53158, CVE-2026-53159, CVE-2026-53161, CVE-2026-53163,\nCVE-2026-53167, CVE-2026-53168, CVE-2026-53177, CVE-2026-53181,\nCVE-2026-53186, CVE-2026-53189, CVE-2026-53194, CVE-2026-53195,\nCVE-2026-53196, CVE-2026-53199, CVE-2026-53208, CVE-2026-53213,\nCVE-2026-53216, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53221, CVE-2026-53223, CVE-2026-53227, CVE-2026-53238,\nCVE-2026-53239, CVE-2026-53245, CVE-2026-53249, CVE-2026-53252,\nCVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,\nCVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266,\nCVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53273,\nCVE-2026-53275, CVE-2026-53325, CVE-2026-53329, CVE-2026-53331,\nCVE-2026-53332, CVE-2026-53337, CVE-2026-53339, CVE-2026-53352,\nCVE-2026-53354, CVE-2026-53355, CVE-2026-53356, CVE-2026-53357,\nCVE-2026-53358, CVE-2026-53381, CVE-2026-53382, CVE-2026-53383,\nCVE-2026-53385, CVE-2026-53388, CVE-2026-53391, CVE-2026-53392,\nCVE-2026-53393, CVE-2026-53397, CVE-2026-53398, CVE-2026-53399,\nCVE-2026-53400, CVE-2026-53402, CVE-2026-53403, CVE-2026-63794,\nCVE-2026-63796, CVE-2026-63798, CVE-2026-63800, CVE-2026-63801,\nCVE-2026-63803, CVE-2026-63806, CVE-2026-63807, CVE-2026-63808,\nCVE-2026-63809, CVE-2026-63810, CVE-2026-63814, CVE-2026-63815,\nCVE-2026-63817, CVE-2026-63818, CVE-2026-63822, CVE-2026-63823,\nCVE-2026-63824, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829,\nCVE-2026-63830, CVE-2026-63831, CVE-2026-63833, CVE-2026-63834,\nCVE-2026-63835, CVE-2026-63836, CVE-2026-63867, CVE-2026-63868,\nCVE-2026-63870, CVE-2026-63875, CVE-2026-63887, CVE-2026-63888,\nCVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,\nCVE-2026-63893, CVE-2026-63895, CVE-2026-63897, CVE-2026-63898,\nCVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,\nCVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63908,\nCVE-2026-63912, CVE-2026-63913, CVE-2026-63914, CVE-2026-63915,\nCVE-2026-63916, CVE-2026-63917, CVE-2026-63919, CVE-2026-63920,\nCVE-2026-63921, CVE-2026-63922, CVE-2026-63924, CVE-2026-63925,\nCVE-2026-63926, CVE-2026-63927, CVE-2026-63928, CVE-2026-63930,\nCVE-2026-63931, CVE-2026-63933, CVE-2026-63934, CVE-2026-63942,\nCVE-2026-63947, CVE-2026-63948, CVE-2026-63954, CVE-2026-63956,\nCVE-2026-63957, CVE-2026-63960, CVE-2026-63961, CVE-2026-63964,\nCVE-2026-63967, CVE-2026-63971, CVE-2026-63975, CVE-2026-63976,\nCVE-2026-63984, CVE-2026-63985, CVE-2026-63990, CVE-2026-63991,\nCVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64002,\nCVE-2026-64004, CVE-2026-64005, CVE-2026-64007, CVE-2026-64009,\nCVE-2026-64010, CVE-2026-64011, CVE-2026-64012, CVE-2026-64014,\nCVE-2026-64090, CVE-2026-64091, CVE-2026-64093, CVE-2026-64094,\nCVE-2026-64095, CVE-2026-64116, CVE-2026-64118, CVE-2026-64123,\nCVE-2026-64126, CVE-2026-64137, CVE-2026-64170, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64206,\nCVE-2026-64222, CVE-2026-64225, CVE-2026-64234, CVE-2026-64237,\nCVE-2026-64242, CVE-2026-64243, CVE-2026-64246, CVE-2026-64249,\nCVE-2026-64266, CVE-2026-64268, CVE-2026-64269, CVE-2026-64271,\nCVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64279, CVE-2026-64296, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64301, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64315,\nCVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,\nCVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338,\nCVE-2026-64340, CVE-2026-64342, CVE-2026-64343, CVE-2026-64344,\nCVE-2026-64346, CVE-2026-64347, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64355, CVE-2026-64359, CVE-2026-64360,\nCVE-2026-64361, CVE-2026-64362, CVE-2026-64363, CVE-2026-64364,\nCVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,\nCVE-2026-64374, CVE-2026-64375, CVE-2026-64379, CVE-2026-64380,\nCVE-2026-64381, CVE-2026-64390, CVE-2026-64401, CVE-2026-64403,\nCVE-2026-64408, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,\nCVE-2026-64420, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425,\nCVE-2026-64428, CVE-2026-64429, CVE-2026-64430, CVE-2026-64432,\nCVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64440,\nCVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444,\nCVE-2026-64445, CVE-2026-64446, CVE-2026-64448, CVE-2026-64450,\nCVE-2026-64452, CVE-2026-64454, CVE-2026-64455, CVE-2026-64456,\nCVE-2026-64461, CVE-2026-64462, CVE-2026-64465, CVE-2026-64468,\nCVE-2026-64469, CVE-2026-64470, CVE-2026-64471, CVE-2026-64475,\nCVE-2026-64478, CVE-2026-64483, CVE-2026-64484, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64494, CVE-2026-64495, CVE-2026-64496,\nCVE-2026-64497, CVE-2026-64500, CVE-2026-64503, CVE-2026-64504,\nCVE-2026-64505, CVE-2026-64510, CVE-2026-64512, CVE-2026-64514,\nCVE-2026-64524, CVE-2026-64527, CVE-2026-64528, CVE-2026-64529,\nCVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534,\nCVE-2026-64535, CVE-2026-64536, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64540, CVE-2026-64541, CVE-2026-64543, CVE-2026-64544,\nCVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548,\nCVE-2026-64549, CVE-2026-64550, CVE-2026-64551, CVE-2026-64553,\nCVE-2026-64554, CVE-2026-64560, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64569,\nCVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64576,\nCVE-2026-64578, CVE-2026-64579, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64593, CVE-2026-64594, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64602, CVE-2026-64604, CVE-2026-68088,\nCVE-2026-68090, CVE-2026-68091, CVE-2026-68104, CVE-2026-68106,\nCVE-2026-68111, CVE-2026-68115, CVE-2026-68117, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68125, CVE-2026-68127, CVE-2026-68129,\nCVE-2026-68131, CVE-2026-68135, CVE-2026-68137, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68151, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155,\nCVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68160,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68180, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68190, CVE-2026-68192, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68204,\nCVE-2026-68209, CVE-2026-68212, CVE-2026-68213, CVE-2026-68214,\nCVE-2026-68215, CVE-2026-68216, CVE-2026-68217, CVE-2026-68218,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68229, CVE-2026-68231, CVE-2026-68234, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68248, CVE-2026-68249, CVE-2026-68250,\nCVE-2026-68284, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68304, CVE-2026-68309,\nCVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68331, CVE-2026-68333, CVE-2026-68335,\nCVE-2026-68338, CVE-2026-68340, CVE-2026-68349, CVE-2026-68350,\nCVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354,\nCVE-2026-68355, CVE-2026-68357, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,\nCVE-2026-68369, CVE-2026-68370, CVE-2026-68373, CVE-2026-68376,\nCVE-2026-68377, CVE-2026-68388, CVE-2026-68395, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68402, CVE-2026-68403, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68410, CVE-2026-68411, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68417, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68428, CVE-2026-68430, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68444, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450,\nCVE-2026-68451, CVE-2026-68452, CVE-2026-68456, CVE-2026-68459,\nCVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72010, CVE-2026-72013, CVE-2026-72014,\nCVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72033, CVE-2026-72036,\nCVE-2026-72038, CVE-2026-72039, CVE-2026-72047, CVE-2026-72048,\nCVE-2026-72049, CVE-2026-72052, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72056, CVE-2026-72061, CVE-2026-72066, CVE-2026-72067,\nCVE-2026-72068, CVE-2026-72074, CVE-2026-72076, CVE-2026-72078,\nCVE-2026-72079, CVE-2026-72081, CVE-2026-72082, CVE-2026-72083,\nCVE-2026-72084, CVE-2026-72085, CVE-2026-72086, CVE-2026-72088,\nCVE-2026-72102, CVE-2026-72105, CVE-2026-72107, CVE-2026-72108,\nCVE-2026-72109, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72129,\nCVE-2026-72133, CVE-2026-72135, CVE-2026-72136, CVE-2026-72138,\nCVE-2026-72140, CVE-2026-72146, CVE-2026-72153, CVE-2026-72159,\nCVE-2026-72160, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72171, CVE-2026-72181,\nCVE-2026-72182, CVE-2026-72192, CVE-2026-72193, CVE-2026-72194,\nCVE-2026-72195, CVE-2026-72197, CVE-2026-72215, CVE-2026-72218,\nCVE-2026-72219, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72226, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230,\nCVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72234,\nCVE-2026-72235, CVE-2026-72238, CVE-2026-72240, CVE-2026-72241,\nCVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72251,\nCVE-2026-72256, CVE-2026-72264, CVE-2026-72265, CVE-2026-72267,\nCVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,\nCVE-2026-72272, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,\nCVE-2026-72282, CVE-2026-72289, CVE-2026-72296, CVE-2026-72297,\nCVE-2026-72298, CVE-2026-72306, CVE-2026-72307, CVE-2026-72310,\nCVE-2026-72314, CVE-2026-72316, CVE-2026-72319, CVE-2026-72322,\nCVE-2026-72326, CVE-2026-72339, CVE-2026-72347, CVE-2026-72348,\nCVE-2026-72349, CVE-2026-72350, CVE-2026-72351, CVE-2026-72371,\nCVE-2026-72374, CVE-2026-72378, CVE-2026-72389, CVE-2026-72392,\nCVE-2026-72396, CVE-2026-72400, CVE-2026-72406, CVE-2026-72409,\nCVE-2026-72414, CVE-2026-72418, CVE-2026-72421, CVE-2026-72422,\nCVE-2026-72428, CVE-2026-72433, CVE-2026-72435, CVE-2026-72441,\nCVE-2026-72447, CVE-2026-72448, CVE-2026-72450, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72466, CVE-2026-72476, CVE-2026-72479,\nCVE-2026-72481, CVE-2026-72483, CVE-2026-72484, CVE-2026-72489,\nCVE-2026-72491, CVE-2026-72492, CVE-2026-72502, CVE-2026-74255,\nCVE-2026-74256, CVE-2026-74262, CVE-2026-74265, CVE-2026-74267,\nCVE-2026-74276, CVE-2026-74279, CVE-2026-74280, CVE-2026-74281,\nCVE-2026-74282, CVE-2026-74283, CVE-2026-74284, CVE-2026-74287,\nCVE-2026-74288, CVE-2026-74292, CVE-2026-74293, CVE-2026-74295,\nCVE-2026-74297, CVE-2026-74305, CVE-2026-74312, CVE-2026-74313,\nCVE-2026-74320, CVE-2026-74321, CVE-2026-74327, CVE-2026-74329,\nCVE-2026-74330, CVE-2026-74331, CVE-2026-74339, CVE-2026-74340,\nCVE-2026-74346, CVE-2026-74348, CVE-2026-74349, CVE-2026-74351,\nCVE-2026-74359, CVE-2026-74363, CVE-2026-74376, CVE-2026-74379,\nCVE-2026-74382, CVE-2026-74384, CVE-2026-74390, CVE-2026-74394,\nCVE-2026-74395, CVE-2026-74398, CVE-2026-74399, CVE-2026-74402,\nCVE-2026-74408, CVE-2026-74410, CVE-2026-74416, CVE-2026-74424,\nCVE-2026-74426, CVE-2026-74427, CVE-2026-74438, CVE-2026-74443,\nCVE-2026-74444, CVE-2026-74453, CVE-2026-74455, CVE-2026-74456,\nCVE-2026-74457, CVE-2026-74458, CVE-2026-74459, CVE-2026-74460,\nCVE-2026-74461, CVE-2026-74463, CVE-2026-74464, CVE-2026-74465,\nCVE-2026-74467, CVE-2026-74468, CVE-2026-74469, CVE-2026-74471,\nCVE-2026-74473, CVE-2026-74475, CVE-2026-74478, CVE-2026-74480,\nCVE-2026-74481, CVE-2026-74482, CVE-2026-74485, CVE-2026-74488,\nCVE-2026-74490, CVE-2026-74492, CVE-2026-74493, CVE-2026-74495,\nCVE-2026-74497, CVE-2026-74498, CVE-2026-74499, CVE-2026-74505,\nCVE-2026-74507, CVE-2026-74508, CVE-2026-74512, CVE-2026-74518,\nCVE-2026-74519, CVE-2026-74523, CVE-2026-74525, CVE-2026-74540,\nCVE-2026-74546, CVE-2026-74547, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74556, CVE-2026-74557, CVE-2026-74563, CVE-2026-74564,\nCVE-2026-74566, CVE-2026-74567, CVE-2026-74569, CVE-2026-74577,\nCVE-2026-74578, CVE-2026-74579, CVE-2026-74580, CVE-2026-74581,\nCVE-2026-74583, CVE-2026-74584, CVE-2026-74585, CVE-2026-74586,\nCVE-2026-74587, CVE-2026-74588, CVE-2026-74589, CVE-2026-74597,\nCVE-2026-74598, CVE-2026-74604, CVE-2026-74609, CVE-2026-74613,\nCVE-2026-74614, CVE-2026-74615, CVE-2026-74616, CVE-2026-74620,\nCVE-2026-74622, CVE-2026-74625, CVE-2026-74630, CVE-2026-74635,\nCVE-2026-74636, CVE-2026-74641, CVE-2026-74648, CVE-2026-74649,\nCVE-2026-74650, CVE-2026-74651, CVE-2026-74654, CVE-2026-74656,\nCVE-2026-74657, CVE-2026-74658, CVE-2026-74659, CVE-2026-74660,\nCVE-2026-74664, CVE-2026-74667, CVE-2026-74669, CVE-2026-74671,\nCVE-2026-74673, CVE-2026-74675, CVE-2026-74676, CVE-2026-74679,\nCVE-2026-74680, CVE-2026-74682, CVE-2026-74683, CVE-2026-74688,\nCVE-2026-74691, CVE-2026-74692, CVE-2026-74693, CVE-2026-74694,\nCVE-2026-74696, CVE-2026-74697, CVE-2026-74701, CVE-2026-74704,\nCVE-2026-74705, CVE-2026-74717, CVE-2026-74719, CVE-2026-74720,\nCVE-2026-74726, CVE-2026-74730, CVE-2026-80591, CVE-2026-80593,\nCVE-2026-80594, CVE-2026-80595, CVE-2026-80597, CVE-2026-80598,\nCVE-2026-80599, CVE-2026-80600, CVE-2026-80601, CVE-2026-80603,\nCVE-2026-80605, CVE-2026-80609, CVE-2026-80613, CVE-2026-80619,\nCVE-2026-80622, CVE-2026-80626, CVE-2026-80627, CVE-2026-80630,\nCVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,\nCVE-2026-80649, CVE-2026-80652, CVE-2026-80659, CVE-2026-80664,\nCVE-2026-80677, CVE-2026-80679, CVE-2026-80680, CVE-2026-80681,\nCVE-2026-80706, CVE-2026-80707, CVE-2026-80708, CVE-2026-80714,\nCVE-2026-80716, CVE-2026-80717, CVE-2026-80718, CVE-2026-80722,\nCVE-2026-80731, CVE-2026-80732, CVE-2026-80733, CVE-2026-80867,\nCVE-2026-80875, CVE-2026-80876, CVE-2026-80877, CVE-2026-80879,\nCVE-2026-80880, CVE-2026-80881, CVE-2026-80886, CVE-2026-80890,\nCVE-2026-80902, CVE-2026-89774)\n","status":"published","published":"2026-10-06T10:10:49Z","modified":"2026-11-09T12:48:52.194440067Z","updated_at":"2026-11-07T01:56:47.245871Z"},{"id":"USN-8886-1","title":"linux-nvidia-tegra vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Intel NPU Driver;\n  - Android drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - Fastrpc Driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Texas Instruments network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - Parport drivers;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - System reset/shutdown drivers;\n  - PTP clock framework;\n  - Voltage and Current Regulator drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SPI subsystem;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - DesignWare USB2 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - exFAT file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - Tracing file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Control group (cgroup);\n  - Glob pattern matching library;\n  - MAC80211 subsystem;\n  - Mellanox drivers;\n  - Networking core;\n  - Network sockets;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IPv4 networking;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Kernel CPU control infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Resizable hashtable library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - X.25 network layer;\n  - eXpress Data Path;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - QCOM ASoC drivers;\n  - Simple audio multiplexer codec driver;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - Amlogic Meson SoC drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2025-37807, CVE-2026-23265, CVE-2026-43022, CVE-2026-46321,\nCVE-2026-46322, CVE-2026-52917, CVE-2026-52923, CVE-2026-52927,\nCVE-2026-52929, CVE-2026-52935, CVE-2026-52942, CVE-2026-52943,\nCVE-2026-52947, CVE-2026-52994, CVE-2026-53136, CVE-2026-53137,\nCVE-2026-53138, CVE-2026-53143, CVE-2026-53146, CVE-2026-53147,\nCVE-2026-53149, CVE-2026-53156, CVE-2026-53157, CVE-2026-53160,\nCVE-2026-53161, CVE-2026-53184, CVE-2026-53189, CVE-2026-53194,\nCVE-2026-53195, CVE-2026-53199, CVE-2026-53202, CVE-2026-53205,\nCVE-2026-53209, CVE-2026-53223, CVE-2026-53229, CVE-2026-53253,\nCVE-2026-53255, CVE-2026-53267, CVE-2026-53268, CVE-2026-53272,\nCVE-2026-53329, CVE-2026-53330, CVE-2026-53356, CVE-2026-53362,\nCVE-2026-53365, CVE-2026-53366, CVE-2026-53381, CVE-2026-53383,\nCVE-2026-53387, CVE-2026-53388, CVE-2026-53389, CVE-2026-53390,\nCVE-2026-53391, CVE-2026-53392, CVE-2026-53397, CVE-2026-53400,\nCVE-2026-53401, CVE-2026-53402, CVE-2026-63794, CVE-2026-63802,\nCVE-2026-63803, CVE-2026-63805, CVE-2026-63806, CVE-2026-63809,\nCVE-2026-63812, CVE-2026-63814, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63819, CVE-2026-63823, CVE-2026-63824, CVE-2026-63827,\nCVE-2026-63833, CVE-2026-63867, CVE-2026-63869, CVE-2026-63870,\nCVE-2026-63875, CVE-2026-63879, CVE-2026-63881, CVE-2026-63884,\nCVE-2026-63889, CVE-2026-63909, CVE-2026-63913, CVE-2026-63920,\nCVE-2026-63925, CVE-2026-63927, CVE-2026-63930, CVE-2026-63942,\nCVE-2026-63954, CVE-2026-63968, CVE-2026-63970, CVE-2026-63971,\nCVE-2026-63985, CVE-2026-64002, CVE-2026-64003, CVE-2026-64004,\nCVE-2026-64005, CVE-2026-64009, CVE-2026-64017, CVE-2026-64023,\nCVE-2026-64026, CVE-2026-64036, CVE-2026-64095, CVE-2026-64123,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64210, CVE-2026-64222,\nCVE-2026-64239, CVE-2026-64242, CVE-2026-64243, CVE-2026-64245,\nCVE-2026-64246, CVE-2026-64266, CVE-2026-64270, CVE-2026-64271,\nCVE-2026-64272, CVE-2026-64273, CVE-2026-64274, CVE-2026-64276,\nCVE-2026-64277, CVE-2026-64279, CVE-2026-64283, CVE-2026-64286,\nCVE-2026-64287, CVE-2026-64296, CVE-2026-64298, CVE-2026-64299,\nCVE-2026-64304, CVE-2026-64312, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64333,\nCVE-2026-64368, CVE-2026-64372, CVE-2026-64374, CVE-2026-64375,\nCVE-2026-64378, CVE-2026-64379, CVE-2026-64380, CVE-2026-64388,\nCVE-2026-64389, CVE-2026-64395, CVE-2026-64398, CVE-2026-64401,\nCVE-2026-64402, CVE-2026-64403, CVE-2026-64411, CVE-2026-64412,\nCVE-2026-64413, CVE-2026-64418, CVE-2026-64420, CVE-2026-64422,\nCVE-2026-64423, CVE-2026-64430, CVE-2026-64432, CVE-2026-64435,\nCVE-2026-64436, CVE-2026-64440, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64448, CVE-2026-64449, CVE-2026-64452,\nCVE-2026-64456, CVE-2026-64463, CVE-2026-64468, CVE-2026-64469,\nCVE-2026-64481, CVE-2026-64496, CVE-2026-64524, CVE-2026-64532,\nCVE-2026-64533, CVE-2026-64536, CVE-2026-64539, CVE-2026-64540,\nCVE-2026-64543, CVE-2026-64545, CVE-2026-64546, CVE-2026-64547,\nCVE-2026-64550, CVE-2026-64556, CVE-2026-64560, CVE-2026-64563,\nCVE-2026-64567, CVE-2026-64568, CVE-2026-64570, CVE-2026-64574,\nCVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64580,\nCVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64585, CVE-2026-64599, CVE-2026-64600, CVE-2026-68091,\nCVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68100,\nCVE-2026-68104, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68116, CVE-2026-68118, CVE-2026-68119, CVE-2026-68121,\nCVE-2026-68125, CVE-2026-68129, CVE-2026-68131, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68145,\nCVE-2026-68148, CVE-2026-68149, CVE-2026-68153, CVE-2026-68155,\nCVE-2026-68157, CVE-2026-68178, CVE-2026-68179, CVE-2026-68189,\nCVE-2026-68192, CVE-2026-68196, CVE-2026-68199, CVE-2026-68202,\nCVE-2026-68204, CVE-2026-68216, CVE-2026-68219, CVE-2026-68222,\nCVE-2026-68236, CVE-2026-68245, CVE-2026-68253, CVE-2026-68255,\nCVE-2026-68258, CVE-2026-68260, CVE-2026-68262, CVE-2026-68263,\nCVE-2026-68266, CVE-2026-68273, CVE-2026-68284, CVE-2026-68287,\nCVE-2026-68290, CVE-2026-68293, CVE-2026-68294, CVE-2026-68297,\nCVE-2026-68299, CVE-2026-68314, CVE-2026-68315, CVE-2026-68320,\nCVE-2026-68322, CVE-2026-68323, CVE-2026-68326, CVE-2026-68329,\nCVE-2026-68335, CVE-2026-68338, CVE-2026-68340, CVE-2026-68348,\nCVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68370,\nCVE-2026-68371, CVE-2026-68373, CVE-2026-68376, CVE-2026-68377,\nCVE-2026-68383, CVE-2026-68389, CVE-2026-68391, CVE-2026-68392,\nCVE-2026-68397, CVE-2026-68398, CVE-2026-68399, CVE-2026-68400,\nCVE-2026-68401, CVE-2026-68402, CVE-2026-68404, CVE-2026-68408,\nCVE-2026-68409, CVE-2026-68414, CVE-2026-68417, CVE-2026-68419,\nCVE-2026-68425, CVE-2026-68432, CVE-2026-68433, CVE-2026-68442,\nCVE-2026-68445, CVE-2026-68446, CVE-2026-68447, CVE-2026-68451,\nCVE-2026-68452, CVE-2026-68453, CVE-2026-68454, CVE-2026-68466,\nCVE-2026-68467, CVE-2026-68471, CVE-2026-68474, CVE-2026-68479,\nCVE-2026-72005, CVE-2026-72009, CVE-2026-72012, CVE-2026-72019,\nCVE-2026-72021, CVE-2026-72024, CVE-2026-72029, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72045, CVE-2026-72049, CVE-2026-72051,\nCVE-2026-72052, CVE-2026-72053, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72057, CVE-2026-72061, CVE-2026-72066, CVE-2026-72067,\nCVE-2026-72072, CVE-2026-72089, CVE-2026-72099, CVE-2026-72102,\nCVE-2026-72105, CVE-2026-72107, CVE-2026-72108, CVE-2026-72109,\nCVE-2026-72110, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72133, CVE-2026-72135, CVE-2026-72136, CVE-2026-72144,\nCVE-2026-72146, CVE-2026-72148, CVE-2026-72149, CVE-2026-72157,\nCVE-2026-72160, CVE-2026-72162, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72170, CVE-2026-72171, CVE-2026-72172, CVE-2026-72175,\nCVE-2026-72181, CVE-2026-72195, CVE-2026-72196, CVE-2026-72197,\nCVE-2026-72213, CVE-2026-72225, CVE-2026-72227, CVE-2026-72231,\nCVE-2026-72232, CVE-2026-72233, CVE-2026-72235, CVE-2026-72242,\nCVE-2026-72243, CVE-2026-72244, CVE-2026-72247, CVE-2026-72250,\nCVE-2026-72252, CVE-2026-72253, CVE-2026-72254, CVE-2026-72261,\nCVE-2026-72262, CVE-2026-72282, CVE-2026-72284, CVE-2026-72297,\nCVE-2026-72298, CVE-2026-72301, CVE-2026-72302, CVE-2026-72304,\nCVE-2026-72310, CVE-2026-72312, CVE-2026-72314, CVE-2026-72330,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72338, CVE-2026-72340,\nCVE-2026-72342, CVE-2026-72343, CVE-2026-72347, CVE-2026-72350,\nCVE-2026-72352, CVE-2026-72369, CVE-2026-72371, CVE-2026-72373,\nCVE-2026-72374, CVE-2026-72375, CVE-2026-72378, CVE-2026-72382,\nCVE-2026-72389, CVE-2026-72390, CVE-2026-72397, CVE-2026-72400,\nCVE-2026-72404, CVE-2026-72405, CVE-2026-72406, CVE-2026-72409,\nCVE-2026-72410, CVE-2026-72416, CVE-2026-72418, CVE-2026-72419,\nCVE-2026-72420, CVE-2026-72423, CVE-2026-72425, CVE-2026-72427,\nCVE-2026-72435, CVE-2026-72438, CVE-2026-72440, CVE-2026-72444,\nCVE-2026-72449, CVE-2026-72450, CVE-2026-72459, CVE-2026-72460,\nCVE-2026-72464, CVE-2026-72469, CVE-2026-72470, CVE-2026-72476,\nCVE-2026-72478, CVE-2026-72480, CVE-2026-72483, CVE-2026-72485,\nCVE-2026-72492, CVE-2026-72502, CVE-2026-74256, CVE-2026-74257,\nCVE-2026-74258, CVE-2026-74262, CVE-2026-74270, CVE-2026-74281,\nCVE-2026-74282, CVE-2026-74283, CVE-2026-74288, CVE-2026-74289,\nCVE-2026-74292, CVE-2026-74293, CVE-2026-74294, CVE-2026-74295,\nCVE-2026-74296, CVE-2026-74297, CVE-2026-74300, CVE-2026-74312,\nCVE-2026-74313, CVE-2026-74314, CVE-2026-74317, CVE-2026-74321,\nCVE-2026-74330, CVE-2026-74334, CVE-2026-74338, CVE-2026-74340,\nCVE-2026-74341, CVE-2026-74344, CVE-2026-74347, CVE-2026-74349,\nCVE-2026-74356, CVE-2026-74359, CVE-2026-74363, CVE-2026-74365,\nCVE-2026-74374, CVE-2026-74375, CVE-2026-74377, CVE-2026-74378,\nCVE-2026-74380, CVE-2026-74385, CVE-2026-74387, CVE-2026-74388,\nCVE-2026-74390, CVE-2026-74397, CVE-2026-74438, CVE-2026-74443,\nCVE-2026-74444, CVE-2026-74446, CVE-2026-74450, CVE-2026-74453,\nCVE-2026-74454, CVE-2026-74456, CVE-2026-74461, CVE-2026-74465,\nCVE-2026-74467, CVE-2026-74469, CVE-2026-74470, CVE-2026-74471,\nCVE-2026-74479, CVE-2026-74481, CVE-2026-74482, CVE-2026-74485,\nCVE-2026-74488, CVE-2026-74490, CVE-2026-74492, CVE-2026-74496,\nCVE-2026-74497, CVE-2026-74507, CVE-2026-74508, CVE-2026-74509,\nCVE-2026-74510, CVE-2026-74512, CVE-2026-74515, CVE-2026-74516,\nCVE-2026-74518, CVE-2026-74519, CVE-2026-74522, CVE-2026-74523,\nCVE-2026-74527, CVE-2026-74530, CVE-2026-74531, CVE-2026-74533,\nCVE-2026-74534, CVE-2026-74535, CVE-2026-74536, CVE-2026-74537,\nCVE-2026-74540, CVE-2026-74544, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74550, CVE-2026-74551, CVE-2026-74557, CVE-2026-74563,\nCVE-2026-74564, CVE-2026-74565, CVE-2026-74567, CVE-2026-74572,\nCVE-2026-74574, CVE-2026-74575, CVE-2026-74578, CVE-2026-74579,\nCVE-2026-74580, CVE-2026-74581, CVE-2026-74582, CVE-2026-74583,\nCVE-2026-74584, CVE-2026-74586, CVE-2026-74587, CVE-2026-74588,\nCVE-2026-74589, CVE-2026-74590, CVE-2026-74592, CVE-2026-74594,\nCVE-2026-74595, CVE-2026-74597, CVE-2026-74598, CVE-2026-74601,\nCVE-2026-74603, CVE-2026-74604, CVE-2026-74605, CVE-2026-74606,\nCVE-2026-74607, CVE-2026-74608, CVE-2026-74609, CVE-2026-74610,\nCVE-2026-74611, CVE-2026-74612, CVE-2026-74613, CVE-2026-74614,\nCVE-2026-74615, CVE-2026-74616, CVE-2026-74621, CVE-2026-74624,\nCVE-2026-74625, CVE-2026-74626, CVE-2026-74628, CVE-2026-74630,\nCVE-2026-74631, CVE-2026-74632, CVE-2026-74634, CVE-2026-74635,\nCVE-2026-74637, CVE-2026-74641, CVE-2026-74646, CVE-2026-74647,\nCVE-2026-74648, CVE-2026-74649, CVE-2026-74651, CVE-2026-74656,\nCVE-2026-74660, CVE-2026-74661, CVE-2026-74662, CVE-2026-74663,\nCVE-2026-74666, CVE-2026-74667, CVE-2026-74668, CVE-2026-74669,\nCVE-2026-74670, CVE-2026-74675, CVE-2026-74678, CVE-2026-74684,\nCVE-2026-74687, CVE-2026-74688, CVE-2026-74689, CVE-2026-74690,\nCVE-2026-74691, CVE-2026-74692, CVE-2026-74695, CVE-2026-74696,\nCVE-2026-74697, CVE-2026-74700, CVE-2026-74701, CVE-2026-74704,\nCVE-2026-74705, CVE-2026-74710, CVE-2026-74711, CVE-2026-74713,\nCVE-2026-74714, CVE-2026-74715, CVE-2026-74717, CVE-2026-74720,\nCVE-2026-74723, CVE-2026-74724, CVE-2026-74725, CVE-2026-74726,\nCVE-2026-74730, CVE-2026-74733, CVE-2026-74736, CVE-2026-74737,\nCVE-2026-74739, CVE-2026-74743, CVE-2026-74744, CVE-2026-74746,\nCVE-2026-74747, CVE-2026-74748, CVE-2026-74752, CVE-2026-80521,\nCVE-2026-80526, CVE-2026-80527, CVE-2026-80528, CVE-2026-80536,\nCVE-2026-80540, CVE-2026-80541, CVE-2026-80547, CVE-2026-80548,\nCVE-2026-80549, CVE-2026-80550, CVE-2026-80551, CVE-2026-80552,\nCVE-2026-80553, CVE-2026-80554, CVE-2026-80555, CVE-2026-80556,\nCVE-2026-80557, CVE-2026-80558, CVE-2026-80559, CVE-2026-80560,\nCVE-2026-80561, CVE-2026-80565, CVE-2026-80568, CVE-2026-80569,\nCVE-2026-80570, CVE-2026-80572, CVE-2026-80574, CVE-2026-80576,\nCVE-2026-80578, CVE-2026-80579, CVE-2026-80580, CVE-2026-80583,\nCVE-2026-80584, CVE-2026-80585, CVE-2026-80586, CVE-2026-80587,\nCVE-2026-80589, CVE-2026-80721, CVE-2026-80901, CVE-2026-97509)\n","status":"published","published":"2026-10-06T15:44:31Z","modified":"2026-11-09T12:49:02.511325613Z","updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"USN-8887-1","title":"linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIB drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - MediaTek PM domains;\n  - Power supply drivers;\n  - PTP clock framework;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - Reset controller framework;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SoundWire subsystem;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB DSL drivers;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Proc file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - File system encryption (fscrypt);\n  - MAC80211 subsystem;\n  - Live Update Orchestrator (LUO);\n  - Mellanox drivers;\n  - Networking core;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IPv4 networking;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - User-space API (UAPI);\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kexec HandOver (KHO);\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Codetag library;\n  - Resizable hashtable library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - AMD SoC Alsa drivers;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - QCOM ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2026-64349, CVE-2026-64532, CVE-2026-64533, CVE-2026-64537,\nCVE-2026-64538, CVE-2026-64539, CVE-2026-64540, CVE-2026-64542,\nCVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,\nCVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,\nCVE-2026-64552, CVE-2026-64553, CVE-2026-64554, CVE-2026-64555,\nCVE-2026-64557, CVE-2026-64558, CVE-2026-64559, CVE-2026-64560,\nCVE-2026-64561, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564,\nCVE-2026-64565, CVE-2026-64566, CVE-2026-64567, CVE-2026-64568,\nCVE-2026-64569, CVE-2026-64570, CVE-2026-64571, CVE-2026-64572,\nCVE-2026-64573, CVE-2026-64574, CVE-2026-64575, CVE-2026-64576,\nCVE-2026-64577, CVE-2026-64578, CVE-2026-64579, CVE-2026-64580,\nCVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64585, CVE-2026-64586, CVE-2026-68081, CVE-2026-68082,\nCVE-2026-68093, CVE-2026-68095, CVE-2026-68096, CVE-2026-68097,\nCVE-2026-68098, CVE-2026-68099, CVE-2026-68100, CVE-2026-68104,\nCVE-2026-68105, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68109, CVE-2026-68110, CVE-2026-68111, CVE-2026-68112,\nCVE-2026-68113, CVE-2026-68114, CVE-2026-68115, CVE-2026-68116,\nCVE-2026-68117, CVE-2026-68118, CVE-2026-68119, CVE-2026-68120,\nCVE-2026-68121, CVE-2026-68122, CVE-2026-68123, CVE-2026-68124,\nCVE-2026-68125, CVE-2026-68126, CVE-2026-68127, CVE-2026-68128,\nCVE-2026-68129, CVE-2026-68130, CVE-2026-68131, CVE-2026-68132,\nCVE-2026-68133, CVE-2026-68134, CVE-2026-68135, CVE-2026-68136,\nCVE-2026-68137, CVE-2026-68138, CVE-2026-68139, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68145, CVE-2026-68146, CVE-2026-68147, CVE-2026-68148,\nCVE-2026-68149, CVE-2026-68150, CVE-2026-68151, CVE-2026-68152,\nCVE-2026-68153, CVE-2026-68154, CVE-2026-68155, CVE-2026-68156,\nCVE-2026-68157, CVE-2026-68158, CVE-2026-68159, CVE-2026-68160,\nCVE-2026-68161, CVE-2026-68162, CVE-2026-68163, CVE-2026-68164,\nCVE-2026-68165, CVE-2026-68166, CVE-2026-68168, CVE-2026-68169,\nCVE-2026-68170, CVE-2026-68172, CVE-2026-68173, CVE-2026-68174,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68177, CVE-2026-68178,\nCVE-2026-68179, CVE-2026-68180, CVE-2026-68181, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68189, CVE-2026-68190, CVE-2026-68191,\nCVE-2026-68192, CVE-2026-68193, CVE-2026-68194, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68198, CVE-2026-68199,\nCVE-2026-68200, CVE-2026-68201, CVE-2026-68202, CVE-2026-68203,\nCVE-2026-68204, CVE-2026-68205, CVE-2026-68206, CVE-2026-68207,\nCVE-2026-68208, CVE-2026-68209, CVE-2026-68210, CVE-2026-68211,\nCVE-2026-68212, CVE-2026-68213, CVE-2026-68214, CVE-2026-68215,\nCVE-2026-68216, CVE-2026-68217, CVE-2026-68218, CVE-2026-68219,\nCVE-2026-68220, CVE-2026-68221, CVE-2026-68222, CVE-2026-68223,\nCVE-2026-68224, CVE-2026-68225, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68228, CVE-2026-68229, CVE-2026-68230, CVE-2026-68231,\nCVE-2026-68232, CVE-2026-68233, CVE-2026-68234, CVE-2026-68235,\nCVE-2026-68236, CVE-2026-68237, CVE-2026-68238, CVE-2026-68239,\nCVE-2026-68240, CVE-2026-68241, CVE-2026-68242, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68245, CVE-2026-68246, CVE-2026-68247,\nCVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68251,\nCVE-2026-68252, CVE-2026-68253, CVE-2026-68254, CVE-2026-68255,\nCVE-2026-68256, CVE-2026-68257, CVE-2026-68258, CVE-2026-68259,\nCVE-2026-68260, CVE-2026-68261, CVE-2026-68262, CVE-2026-68263,\nCVE-2026-68264, CVE-2026-68265, CVE-2026-68266, CVE-2026-68267,\nCVE-2026-68268, CVE-2026-68269, CVE-2026-68270, CVE-2026-68271,\nCVE-2026-68272, CVE-2026-68273, CVE-2026-68274, CVE-2026-68275,\nCVE-2026-68276, CVE-2026-68277, CVE-2026-68278, CVE-2026-68279,\nCVE-2026-68280, CVE-2026-68281, CVE-2026-68282, CVE-2026-68283,\nCVE-2026-68284, CVE-2026-68286, CVE-2026-68287, CVE-2026-68288,\nCVE-2026-68289, CVE-2026-68290, CVE-2026-68291, CVE-2026-68292,\nCVE-2026-68293, CVE-2026-68294, CVE-2026-68296, CVE-2026-68297,\nCVE-2026-68298, CVE-2026-68299, CVE-2026-68300, CVE-2026-68301,\nCVE-2026-68302, CVE-2026-68303, CVE-2026-68304, CVE-2026-68306,\nCVE-2026-68307, CVE-2026-68308, CVE-2026-68309, CVE-2026-68310,\nCVE-2026-68311, CVE-2026-68312, CVE-2026-68313, CVE-2026-68314,\nCVE-2026-68315, CVE-2026-68316, CVE-2026-68317, CVE-2026-68318,\nCVE-2026-68319, CVE-2026-68320, CVE-2026-68321, CVE-2026-68322,\nCVE-2026-68323, CVE-2026-68324, CVE-2026-68325, CVE-2026-68326,\nCVE-2026-68327, CVE-2026-68328, CVE-2026-68329, CVE-2026-68330,\nCVE-2026-68331, CVE-2026-68332, CVE-2026-68333, CVE-2026-68334,\nCVE-2026-68335, CVE-2026-68336, CVE-2026-68337, CVE-2026-68338,\nCVE-2026-68339, CVE-2026-68340, CVE-2026-68341, CVE-2026-68342,\nCVE-2026-68343, CVE-2026-68345, CVE-2026-68346, CVE-2026-68347,\nCVE-2026-68348, CVE-2026-68349, CVE-2026-68350, CVE-2026-68351,\nCVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68355,\nCVE-2026-68356, CVE-2026-68357, CVE-2026-68358, CVE-2026-68359,\nCVE-2026-68360, CVE-2026-68361, CVE-2026-68362, CVE-2026-68363,\nCVE-2026-68364, CVE-2026-68365, CVE-2026-68366, CVE-2026-68367,\nCVE-2026-68368, CVE-2026-68369, CVE-2026-68370, CVE-2026-68371,\nCVE-2026-68372, CVE-2026-68373, CVE-2026-68374, CVE-2026-68375,\nCVE-2026-68376, CVE-2026-68377, CVE-2026-68378, CVE-2026-68379,\nCVE-2026-68380, CVE-2026-68381, CVE-2026-68382, CVE-2026-68383,\nCVE-2026-68384, CVE-2026-68385, CVE-2026-68386, CVE-2026-68387,\nCVE-2026-68388, CVE-2026-68389, CVE-2026-68390, CVE-2026-68391,\nCVE-2026-68392, CVE-2026-68393, CVE-2026-68394, CVE-2026-68395,\nCVE-2026-68396, CVE-2026-68397, CVE-2026-68398, CVE-2026-68399,\nCVE-2026-68400, CVE-2026-68401, CVE-2026-68402, CVE-2026-68403,\nCVE-2026-68404, CVE-2026-68405, CVE-2026-68406, CVE-2026-68407,\nCVE-2026-68408, CVE-2026-68409, CVE-2026-68410, CVE-2026-68411,\nCVE-2026-68412, CVE-2026-68413, CVE-2026-68414, CVE-2026-68415,\nCVE-2026-68416, CVE-2026-68417, CVE-2026-68418, CVE-2026-68419,\nCVE-2026-68420, CVE-2026-68421, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68426, CVE-2026-68427, CVE-2026-68428, CVE-2026-68429,\nCVE-2026-68430, CVE-2026-68431, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68434, CVE-2026-68436, CVE-2026-68437, CVE-2026-68439,\nCVE-2026-68440, CVE-2026-68441, CVE-2026-68442, CVE-2026-68443,\nCVE-2026-68444, CVE-2026-68445, CVE-2026-68446, CVE-2026-68447,\nCVE-2026-68448, CVE-2026-68449, CVE-2026-68450, CVE-2026-68454,\nCVE-2026-68455, CVE-2026-68456, CVE-2026-68458, CVE-2026-68463,\nCVE-2026-68464, CVE-2026-68465, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68470, CVE-2026-68471, CVE-2026-68472,\nCVE-2026-68473, CVE-2026-68474, CVE-2026-68475, CVE-2026-68478,\nCVE-2026-68479, CVE-2026-68480, CVE-2026-72003, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72006, CVE-2026-72007, CVE-2026-72008,\nCVE-2026-72009, CVE-2026-72010, CVE-2026-72011, CVE-2026-72012,\nCVE-2026-72013, CVE-2026-72015, CVE-2026-72016, CVE-2026-72017,\nCVE-2026-72018, CVE-2026-72019, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72023, CVE-2026-72024, CVE-2026-72025, CVE-2026-72026,\nCVE-2026-72027, CVE-2026-72028, CVE-2026-72029, CVE-2026-72030,\nCVE-2026-72031, CVE-2026-72032, CVE-2026-72034, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72042, CVE-2026-72045, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72050, CVE-2026-72051,\nCVE-2026-72052, CVE-2026-72053, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72056, CVE-2026-72057, CVE-2026-72058, CVE-2026-72059,\nCVE-2026-72060, CVE-2026-72061, CVE-2026-72062, CVE-2026-72063,\nCVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72070,\nCVE-2026-72071, CVE-2026-72072, CVE-2026-72073, CVE-2026-72074,\nCVE-2026-72075, CVE-2026-72076, CVE-2026-72077, CVE-2026-72078,\nCVE-2026-72079, CVE-2026-72080, CVE-2026-72081, CVE-2026-72082,\nCVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,\nCVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093,\nCVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72099,\nCVE-2026-72100, CVE-2026-72101, CVE-2026-72102, CVE-2026-72103,\nCVE-2026-72104, CVE-2026-72105, CVE-2026-72106, CVE-2026-72107,\nCVE-2026-72108, CVE-2026-72109, CVE-2026-72110, CVE-2026-72111,\nCVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116,\nCVE-2026-72117, CVE-2026-72118, CVE-2026-72119, CVE-2026-72120,\nCVE-2026-72121, CVE-2026-72122, CVE-2026-72123, CVE-2026-72124,\nCVE-2026-72125, CVE-2026-72126, CVE-2026-72127, CVE-2026-72128,\nCVE-2026-72131, CVE-2026-72132, CVE-2026-72133, CVE-2026-72134,\nCVE-2026-72135, CVE-2026-72136, CVE-2026-72138, CVE-2026-72140,\nCVE-2026-72141, CVE-2026-72142, CVE-2026-72143, CVE-2026-72144,\nCVE-2026-72146, CVE-2026-72147, CVE-2026-72148, CVE-2026-72149,\nCVE-2026-72150, CVE-2026-72151, CVE-2026-72152, CVE-2026-72153,\nCVE-2026-72154, CVE-2026-72155, CVE-2026-72156, CVE-2026-72157,\nCVE-2026-72158, CVE-2026-72159, CVE-2026-72160, CVE-2026-72161,\nCVE-2026-72162, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72168, CVE-2026-72169,\nCVE-2026-72170, CVE-2026-72171, CVE-2026-72172, CVE-2026-72173,\nCVE-2026-72174, CVE-2026-72175, CVE-2026-72176, CVE-2026-72177,\nCVE-2026-72178, CVE-2026-72179, CVE-2026-72180, CVE-2026-72181,\nCVE-2026-72182, CVE-2026-72183, CVE-2026-72193, CVE-2026-72195,\nCVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213,\nCVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72218,\nCVE-2026-72219, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72227, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230,\nCVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72235,\nCVE-2026-72236, CVE-2026-72237, CVE-2026-72238, CVE-2026-72240,\nCVE-2026-72241, CVE-2026-72242, CVE-2026-72243, CVE-2026-72244,\nCVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72252,\nCVE-2026-72253, CVE-2026-72254, CVE-2026-72255, CVE-2026-72256,\nCVE-2026-72257, CVE-2026-72258, CVE-2026-72259, CVE-2026-72260,\nCVE-2026-72261, CVE-2026-72262, CVE-2026-72263, CVE-2026-72264,\nCVE-2026-72265, CVE-2026-72266, CVE-2026-72267, CVE-2026-72268,\nCVE-2026-72269, CVE-2026-72270, CVE-2026-72271, CVE-2026-72272,\nCVE-2026-72273, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,\nCVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284,\nCVE-2026-72285, CVE-2026-72286, CVE-2026-72290, CVE-2026-72292,\nCVE-2026-72293, CVE-2026-72297, CVE-2026-72298, CVE-2026-72300,\nCVE-2026-72301, CVE-2026-72302, CVE-2026-72303, CVE-2026-72304,\nCVE-2026-72305, CVE-2026-72306, CVE-2026-72307, CVE-2026-72308,\nCVE-2026-72310, CVE-2026-72312, CVE-2026-72313, CVE-2026-72314,\nCVE-2026-72315, CVE-2026-72316, CVE-2026-72321, CVE-2026-72324,\nCVE-2026-72325, CVE-2026-72326, CVE-2026-72327, CVE-2026-72328,\nCVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337,\nCVE-2026-72338, CVE-2026-72340, CVE-2026-72341, CVE-2026-72342,\nCVE-2026-72343, CVE-2026-72345, CVE-2026-72347, CVE-2026-72349,\nCVE-2026-72350, CVE-2026-72352, CVE-2026-72356, CVE-2026-72357,\nCVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363,\nCVE-2026-72364, CVE-2026-72365, CVE-2026-72367, CVE-2026-72368,\nCVE-2026-72369, CVE-2026-72370, CVE-2026-72371, CVE-2026-72372,\nCVE-2026-72373, CVE-2026-72374, CVE-2026-72375, CVE-2026-72376,\nCVE-2026-72377, CVE-2026-72378, CVE-2026-72379, CVE-2026-72380,\nCVE-2026-72382, CVE-2026-72383, CVE-2026-72384, CVE-2026-72385,\nCVE-2026-72386, CVE-2026-72387, CVE-2026-72388, CVE-2026-72389,\nCVE-2026-72390, CVE-2026-72391, CVE-2026-72392, CVE-2026-72394,\nCVE-2026-72395, CVE-2026-72396, CVE-2026-72397, CVE-2026-72400,\nCVE-2026-72401, CVE-2026-72402, CVE-2026-72403, CVE-2026-72405,\nCVE-2026-72406, CVE-2026-72407, CVE-2026-72408, CVE-2026-72409,\nCVE-2026-72410, CVE-2026-72413, CVE-2026-72414, CVE-2026-72415,\nCVE-2026-72416, CVE-2026-72418, CVE-2026-72419, CVE-2026-72420,\nCVE-2026-72421, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425,\nCVE-2026-72427, CVE-2026-72428, CVE-2026-72430, CVE-2026-72431,\nCVE-2026-72433, CVE-2026-72434, CVE-2026-72435, CVE-2026-72437,\nCVE-2026-72438, CVE-2026-72439, CVE-2026-72440, CVE-2026-72441,\nCVE-2026-72443, CVE-2026-72444, CVE-2026-72445, CVE-2026-72446,\nCVE-2026-72447, CVE-2026-72448, CVE-2026-72449, CVE-2026-72450,\nCVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455,\nCVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72464,\nCVE-2026-72465, CVE-2026-72467, CVE-2026-72468, CVE-2026-72469,\nCVE-2026-72470, CVE-2026-72471, CVE-2026-72474, CVE-2026-72475,\nCVE-2026-72476, CVE-2026-72478, CVE-2026-72479, CVE-2026-72480,\nCVE-2026-72481, CVE-2026-72482, CVE-2026-72483, CVE-2026-72484,\nCVE-2026-72485, CVE-2026-72486, CVE-2026-72487, CVE-2026-72488,\nCVE-2026-72489, CVE-2026-72492, CVE-2026-72498, CVE-2026-72499,\nCVE-2026-72500, CVE-2026-72502, CVE-2026-74256, CVE-2026-74257,\nCVE-2026-74258, CVE-2026-74260, CVE-2026-74261, CVE-2026-74262,\nCVE-2026-74263, CVE-2026-74264, CVE-2026-74265, CVE-2026-74266,\nCVE-2026-74270, CVE-2026-74271, CVE-2026-74272, CVE-2026-74273,\nCVE-2026-74274, CVE-2026-74276, CVE-2026-74277, CVE-2026-74278,\nCVE-2026-74279, CVE-2026-74280, CVE-2026-74281, CVE-2026-74282,\nCVE-2026-74283, CVE-2026-74284, CVE-2026-74286, CVE-2026-74288,\nCVE-2026-74289, CVE-2026-74290, CVE-2026-74291, CVE-2026-74292,\nCVE-2026-74293, CVE-2026-74294, CVE-2026-74295, CVE-2026-74296,\nCVE-2026-74297, CVE-2026-74300, CVE-2026-74301, CVE-2026-74302,\nCVE-2026-74303, CVE-2026-74304, CVE-2026-74305, CVE-2026-74306,\nCVE-2026-74307, CVE-2026-74308, CVE-2026-74309, CVE-2026-74311,\nCVE-2026-74312, CVE-2026-74313, CVE-2026-74314, CVE-2026-74316,\nCVE-2026-74317, CVE-2026-74318, CVE-2026-74320, CVE-2026-74321,\nCVE-2026-74322, CVE-2026-74323, CVE-2026-74324, CVE-2026-74325,\nCVE-2026-74327, CVE-2026-74328, CVE-2026-74329, CVE-2026-74330,\nCVE-2026-74331, CVE-2026-74332, CVE-2026-74333, CVE-2026-74334,\nCVE-2026-74335, CVE-2026-74336, CVE-2026-74337, CVE-2026-74338,\nCVE-2026-74339, CVE-2026-74340, CVE-2026-74341, CVE-2026-74344,\nCVE-2026-74346, CVE-2026-74347, CVE-2026-74348, CVE-2026-74349,\nCVE-2026-74351, CVE-2026-74352, CVE-2026-74353, CVE-2026-74354,\nCVE-2026-74355, CVE-2026-74356, CVE-2026-74358, CVE-2026-74359,\nCVE-2026-74360, CVE-2026-74362, CVE-2026-74363, CVE-2026-74364,\nCVE-2026-74365, CVE-2026-74366, CVE-2026-74367, CVE-2026-74368,\nCVE-2026-74370, CVE-2026-74371, CVE-2026-74372, CVE-2026-74373,\nCVE-2026-74374, CVE-2026-74375, CVE-2026-74377, CVE-2026-74378,\nCVE-2026-74379, CVE-2026-74380, CVE-2026-74381, CVE-2026-74382,\nCVE-2026-74383, CVE-2026-74385, CVE-2026-74386, CVE-2026-74387,\nCVE-2026-74388, CVE-2026-74389, CVE-2026-74390, CVE-2026-74391,\nCVE-2026-74392, CVE-2026-74393, CVE-2026-74395, CVE-2026-74396,\nCVE-2026-74397, CVE-2026-74399, CVE-2026-74400, CVE-2026-74402,\nCVE-2026-74403, CVE-2026-74404, CVE-2026-74405, CVE-2026-74407,\nCVE-2026-74408, CVE-2026-74409, CVE-2026-74410, CVE-2026-74411,\nCVE-2026-74412, CVE-2026-74413, CVE-2026-74415, CVE-2026-74416,\nCVE-2026-74417, CVE-2026-74419, CVE-2026-74420, CVE-2026-74421,\nCVE-2026-74422, CVE-2026-74423, CVE-2026-74424, CVE-2026-74425,\nCVE-2026-74426, CVE-2026-74429, CVE-2026-74430, CVE-2026-74431,\nCVE-2026-74432, CVE-2026-74435, CVE-2026-74437, CVE-2026-74438,\nCVE-2026-80592, CVE-2026-80593, CVE-2026-80594, CVE-2026-80595,\nCVE-2026-80596, CVE-2026-80597, CVE-2026-80598, CVE-2026-80599,\nCVE-2026-80600, CVE-2026-80601, CVE-2026-80602, CVE-2026-80603,\nCVE-2026-80604, CVE-2026-80605, CVE-2026-80606, CVE-2026-80607,\nCVE-2026-80609, CVE-2026-80610, CVE-2026-80611, CVE-2026-80612,\nCVE-2026-80613, CVE-2026-80614, CVE-2026-80615, CVE-2026-80616,\nCVE-2026-80617, CVE-2026-80618, CVE-2026-80619, CVE-2026-80620,\nCVE-2026-80621, CVE-2026-80622, CVE-2026-80623, CVE-2026-80624,\nCVE-2026-80625, CVE-2026-80626, CVE-2026-80627, CVE-2026-80628,\nCVE-2026-80629, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634,\nCVE-2026-80635, CVE-2026-80636, CVE-2026-80637, CVE-2026-80638,\nCVE-2026-80639, CVE-2026-80640, CVE-2026-80641, CVE-2026-80642,\nCVE-2026-80643, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646,\nCVE-2026-80647, CVE-2026-80648, CVE-2026-80649, CVE-2026-80650,\nCVE-2026-80651, CVE-2026-80652, CVE-2026-80653, CVE-2026-80654,\nCVE-2026-80655, CVE-2026-80657, CVE-2026-80658, CVE-2026-80659,\nCVE-2026-80660, CVE-2026-80661, CVE-2026-80662, CVE-2026-80663,\nCVE-2026-80664, CVE-2026-80666, CVE-2026-80667, CVE-2026-80668,\nCVE-2026-80669, CVE-2026-80670, CVE-2026-80671, CVE-2026-80675,\nCVE-2026-80676, CVE-2026-80677, CVE-2026-80865, CVE-2026-80866,\nCVE-2026-80867, CVE-2026-80868, CVE-2026-80870, CVE-2026-80871,\nCVE-2026-80872, CVE-2026-80873, CVE-2026-80874, CVE-2026-80875,\nCVE-2026-80876, CVE-2026-80877, CVE-2026-80878, CVE-2026-80879,\nCVE-2026-80880, CVE-2026-80881, CVE-2026-80882, CVE-2026-80883,\nCVE-2026-80884, CVE-2026-80885, CVE-2026-80886, CVE-2026-89774,\nCVE-2026-92502)\n","status":"published","published":"2026-10-06T15:45:17Z","modified":"2026-11-09T12:53:44.416171187Z","updated_at":"2026-11-09T13:25:32.592646Z"},{"id":"USN-8887-2","title":"linux-aws-7.0 vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIB drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - MediaTek PM domains;\n  - Power supply drivers;\n  - PTP clock framework;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - Reset controller framework;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SoundWire subsystem;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB DSL drivers;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Proc file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - File system encryption (fscrypt);\n  - MAC80211 subsystem;\n  - Live Update Orchestrator (LUO);\n  - Mellanox drivers;\n  - Networking core;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IPv4 networking;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - User-space API (UAPI);\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kexec HandOver (KHO);\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Codetag library;\n  - Resizable hashtable library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - AMD SoC Alsa drivers;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - QCOM ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2026-64349, CVE-2026-64532, CVE-2026-64533, CVE-2026-64537,\nCVE-2026-64538, CVE-2026-64539, CVE-2026-64540, CVE-2026-64542,\nCVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,\nCVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,\nCVE-2026-64552, CVE-2026-64553, CVE-2026-64554, CVE-2026-64555,\nCVE-2026-64557, CVE-2026-64558, CVE-2026-64559, CVE-2026-64560,\nCVE-2026-64561, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564,\nCVE-2026-64565, CVE-2026-64566, CVE-2026-64567, CVE-2026-64568,\nCVE-2026-64569, CVE-2026-64570, CVE-2026-64571, CVE-2026-64572,\nCVE-2026-64573, CVE-2026-64574, CVE-2026-64575, CVE-2026-64576,\nCVE-2026-64577, CVE-2026-64578, CVE-2026-64579, CVE-2026-64580,\nCVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64585, CVE-2026-64586, CVE-2026-68081, CVE-2026-68082,\nCVE-2026-68093, CVE-2026-68095, CVE-2026-68096, CVE-2026-68097,\nCVE-2026-68098, CVE-2026-68099, CVE-2026-68100, CVE-2026-68104,\nCVE-2026-68105, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68109, CVE-2026-68110, CVE-2026-68111, CVE-2026-68112,\nCVE-2026-68113, CVE-2026-68114, CVE-2026-68115, CVE-2026-68116,\nCVE-2026-68117, CVE-2026-68118, CVE-2026-68119, CVE-2026-68120,\nCVE-2026-68121, CVE-2026-68122, CVE-2026-68123, CVE-2026-68124,\nCVE-2026-68125, CVE-2026-68126, CVE-2026-68127, CVE-2026-68128,\nCVE-2026-68129, CVE-2026-68130, CVE-2026-68131, CVE-2026-68132,\nCVE-2026-68133, CVE-2026-68134, CVE-2026-68135, CVE-2026-68136,\nCVE-2026-68137, CVE-2026-68138, CVE-2026-68139, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68145, CVE-2026-68146, CVE-2026-68147, CVE-2026-68148,\nCVE-2026-68149, CVE-2026-68150, CVE-2026-68151, CVE-2026-68152,\nCVE-2026-68153, CVE-2026-68154, CVE-2026-68155, CVE-2026-68156,\nCVE-2026-68157, CVE-2026-68158, CVE-2026-68159, CVE-2026-68160,\nCVE-2026-68161, CVE-2026-68162, CVE-2026-68163, CVE-2026-68164,\nCVE-2026-68165, CVE-2026-68166, CVE-2026-68168, CVE-2026-68169,\nCVE-2026-68170, CVE-2026-68172, CVE-2026-68173, CVE-2026-68174,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68177, CVE-2026-68178,\nCVE-2026-68179, CVE-2026-68180, CVE-2026-68181, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68189, CVE-2026-68190, CVE-2026-68191,\nCVE-2026-68192, CVE-2026-68193, CVE-2026-68194, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68198, CVE-2026-68199,\nCVE-2026-68200, CVE-2026-68201, CVE-2026-68202, CVE-2026-68203,\nCVE-2026-68204, CVE-2026-68205, CVE-2026-68206, CVE-2026-68207,\nCVE-2026-68208, CVE-2026-68209, CVE-2026-68210, CVE-2026-68211,\nCVE-2026-68212, CVE-2026-68213, CVE-2026-68214, CVE-2026-68215,\nCVE-2026-68216, CVE-2026-68217, CVE-2026-68218, CVE-2026-68219,\nCVE-2026-68220, CVE-2026-68221, CVE-2026-68222, CVE-2026-68223,\nCVE-2026-68224, CVE-2026-68225, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68228, CVE-2026-68229, CVE-2026-68230, CVE-2026-68231,\nCVE-2026-68232, CVE-2026-68233, CVE-2026-68234, CVE-2026-68235,\nCVE-2026-68236, CVE-2026-68237, CVE-2026-68238, CVE-2026-68239,\nCVE-2026-68240, CVE-2026-68241, CVE-2026-68242, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68245, CVE-2026-68246, CVE-2026-68247,\nCVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68251,\nCVE-2026-68252, CVE-2026-68253, CVE-2026-68254, CVE-2026-68255,\nCVE-2026-68256, CVE-2026-68257, CVE-2026-68258, CVE-2026-68259,\nCVE-2026-68260, CVE-2026-68261, CVE-2026-68262, CVE-2026-68263,\nCVE-2026-68264, CVE-2026-68265, CVE-2026-68266, CVE-2026-68267,\nCVE-2026-68268, CVE-2026-68269, CVE-2026-68270, CVE-2026-68271,\nCVE-2026-68272, CVE-2026-68273, CVE-2026-68274, CVE-2026-68275,\nCVE-2026-68276, CVE-2026-68277, CVE-2026-68278, CVE-2026-68279,\nCVE-2026-68280, CVE-2026-68281, CVE-2026-68282, CVE-2026-68283,\nCVE-2026-68284, CVE-2026-68286, CVE-2026-68287, CVE-2026-68288,\nCVE-2026-68289, CVE-2026-68290, CVE-2026-68291, CVE-2026-68292,\nCVE-2026-68293, CVE-2026-68294, CVE-2026-68296, CVE-2026-68297,\nCVE-2026-68298, CVE-2026-68299, CVE-2026-68300, CVE-2026-68301,\nCVE-2026-68302, CVE-2026-68303, CVE-2026-68304, CVE-2026-68306,\nCVE-2026-68307, CVE-2026-68308, CVE-2026-68309, CVE-2026-68310,\nCVE-2026-68311, CVE-2026-68312, CVE-2026-68313, CVE-2026-68314,\nCVE-2026-68315, CVE-2026-68316, CVE-2026-68317, CVE-2026-68318,\nCVE-2026-68319, CVE-2026-68320, CVE-2026-68321, CVE-2026-68322,\nCVE-2026-68323, CVE-2026-68324, CVE-2026-68325, CVE-2026-68326,\nCVE-2026-68327, CVE-2026-68328, CVE-2026-68329, CVE-2026-68330,\nCVE-2026-68331, CVE-2026-68332, CVE-2026-68333, CVE-2026-68334,\nCVE-2026-68335, CVE-2026-68336, CVE-2026-68337, CVE-2026-68338,\nCVE-2026-68339, CVE-2026-68340, CVE-2026-68341, CVE-2026-68342,\nCVE-2026-68343, CVE-2026-68345, CVE-2026-68346, CVE-2026-68347,\nCVE-2026-68348, CVE-2026-68349, CVE-2026-68350, CVE-2026-68351,\nCVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68355,\nCVE-2026-68356, CVE-2026-68357, CVE-2026-68358, CVE-2026-68359,\nCVE-2026-68360, CVE-2026-68361, CVE-2026-68362, CVE-2026-68363,\nCVE-2026-68364, CVE-2026-68365, CVE-2026-68366, CVE-2026-68367,\nCVE-2026-68368, CVE-2026-68369, CVE-2026-68370, CVE-2026-68371,\nCVE-2026-68372, CVE-2026-68373, CVE-2026-68374, CVE-2026-68375,\nCVE-2026-68376, CVE-2026-68377, CVE-2026-68378, CVE-2026-68379,\nCVE-2026-68380, CVE-2026-68381, CVE-2026-68382, CVE-2026-68383,\nCVE-2026-68384, CVE-2026-68385, CVE-2026-68386, CVE-2026-68387,\nCVE-2026-68388, CVE-2026-68389, CVE-2026-68390, CVE-2026-68391,\nCVE-2026-68392, CVE-2026-68393, CVE-2026-68394, CVE-2026-68395,\nCVE-2026-68396, CVE-2026-68397, CVE-2026-68398, CVE-2026-68399,\nCVE-2026-68400, CVE-2026-68401, CVE-2026-68402, CVE-2026-68403,\nCVE-2026-68404, CVE-2026-68405, CVE-2026-68406, CVE-2026-68407,\nCVE-2026-68408, CVE-2026-68409, CVE-2026-68410, CVE-2026-68411,\nCVE-2026-68412, CVE-2026-68413, CVE-2026-68414, CVE-2026-68415,\nCVE-2026-68416, CVE-2026-68417, CVE-2026-68418, CVE-2026-68419,\nCVE-2026-68420, CVE-2026-68421, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68426, CVE-2026-68427, CVE-2026-68428, CVE-2026-68429,\nCVE-2026-68430, CVE-2026-68431, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68434, CVE-2026-68436, CVE-2026-68437, CVE-2026-68439,\nCVE-2026-68440, CVE-2026-68441, CVE-2026-68442, CVE-2026-68443,\nCVE-2026-68444, CVE-2026-68445, CVE-2026-68446, CVE-2026-68447,\nCVE-2026-68448, CVE-2026-68449, CVE-2026-68450, CVE-2026-68454,\nCVE-2026-68455, CVE-2026-68456, CVE-2026-68458, CVE-2026-68463,\nCVE-2026-68464, CVE-2026-68465, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68470, CVE-2026-68471, CVE-2026-68472,\nCVE-2026-68473, CVE-2026-68474, CVE-2026-68475, CVE-2026-68478,\nCVE-2026-68479, CVE-2026-68480, CVE-2026-72003, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72006, CVE-2026-72007, CVE-2026-72008,\nCVE-2026-72009, CVE-2026-72010, CVE-2026-72011, CVE-2026-72012,\nCVE-2026-72013, CVE-2026-72015, CVE-2026-72016, CVE-2026-72017,\nCVE-2026-72018, CVE-2026-72019, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72023, CVE-2026-72024, CVE-2026-72025, CVE-2026-72026,\nCVE-2026-72027, CVE-2026-72028, CVE-2026-72029, CVE-2026-72030,\nCVE-2026-72031, CVE-2026-72032, CVE-2026-72034, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72042, CVE-2026-72045, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72050, CVE-2026-72051,\nCVE-2026-72052, CVE-2026-72053, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72056, CVE-2026-72057, CVE-2026-72058, CVE-2026-72059,\nCVE-2026-72060, CVE-2026-72061, CVE-2026-72062, CVE-2026-72063,\nCVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72070,\nCVE-2026-72071, CVE-2026-72072, CVE-2026-72073, CVE-2026-72074,\nCVE-2026-72075, CVE-2026-72076, CVE-2026-72077, CVE-2026-72078,\nCVE-2026-72079, CVE-2026-72080, CVE-2026-72081, CVE-2026-72082,\nCVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,\nCVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093,\nCVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72099,\nCVE-2026-72100, CVE-2026-72101, CVE-2026-72102, CVE-2026-72103,\nCVE-2026-72104, CVE-2026-72105, CVE-2026-72106, CVE-2026-72107,\nCVE-2026-72108, CVE-2026-72109, CVE-2026-72110, CVE-2026-72111,\nCVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116,\nCVE-2026-72117, CVE-2026-72118, CVE-2026-72119, CVE-2026-72120,\nCVE-2026-72121, CVE-2026-72122, CVE-2026-72123, CVE-2026-72124,\nCVE-2026-72125, CVE-2026-72126, CVE-2026-72127, CVE-2026-72128,\nCVE-2026-72131, CVE-2026-72132, CVE-2026-72133, CVE-2026-72134,\nCVE-2026-72135, CVE-2026-72136, CVE-2026-72138, CVE-2026-72140,\nCVE-2026-72141, CVE-2026-72142, CVE-2026-72143, CVE-2026-72144,\nCVE-2026-72146, CVE-2026-72147, CVE-2026-72148, CVE-2026-72149,\nCVE-2026-72150, CVE-2026-72151, CVE-2026-72152, CVE-2026-72153,\nCVE-2026-72154, CVE-2026-72155, CVE-2026-72156, CVE-2026-72157,\nCVE-2026-72158, CVE-2026-72159, CVE-2026-72160, CVE-2026-72161,\nCVE-2026-72162, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72168, CVE-2026-72169,\nCVE-2026-72170, CVE-2026-72171, CVE-2026-72172, CVE-2026-72173,\nCVE-2026-72174, CVE-2026-72175, CVE-2026-72176, CVE-2026-72177,\nCVE-2026-72178, CVE-2026-72179, CVE-2026-72180, CVE-2026-72181,\nCVE-2026-72182, CVE-2026-72183, CVE-2026-72193, CVE-2026-72195,\nCVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213,\nCVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72218,\nCVE-2026-72219, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72227, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230,\nCVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72235,\nCVE-2026-72236, CVE-2026-72237, CVE-2026-72238, CVE-2026-72240,\nCVE-2026-72241, CVE-2026-72242, CVE-2026-72243, CVE-2026-72244,\nCVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72252,\nCVE-2026-72253, CVE-2026-72254, CVE-2026-72255, CVE-2026-72256,\nCVE-2026-72257, CVE-2026-72258, CVE-2026-72259, CVE-2026-72260,\nCVE-2026-72261, CVE-2026-72262, CVE-2026-72263, CVE-2026-72264,\nCVE-2026-72265, CVE-2026-72266, CVE-2026-72267, CVE-2026-72268,\nCVE-2026-72269, CVE-2026-72270, CVE-2026-72271, CVE-2026-72272,\nCVE-2026-72273, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,\nCVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284,\nCVE-2026-72285, CVE-2026-72286, CVE-2026-72290, CVE-2026-72292,\nCVE-2026-72293, CVE-2026-72297, CVE-2026-72298, CVE-2026-72300,\nCVE-2026-72301, CVE-2026-72302, CVE-2026-72303, CVE-2026-72304,\nCVE-2026-72305, CVE-2026-72306, CVE-2026-72307, CVE-2026-72308,\nCVE-2026-72310, CVE-2026-72312, CVE-2026-72313, CVE-2026-72314,\nCVE-2026-72315, CVE-2026-72316, CVE-2026-72321, CVE-2026-72324,\nCVE-2026-72325, CVE-2026-72326, CVE-2026-72327, CVE-2026-72328,\nCVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337,\nCVE-2026-72338, CVE-2026-72340, CVE-2026-72341, CVE-2026-72342,\nCVE-2026-72343, CVE-2026-72345, CVE-2026-72347, CVE-2026-72349,\nCVE-2026-72350, CVE-2026-72352, CVE-2026-72356, CVE-2026-72357,\nCVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363,\nCVE-2026-72364, CVE-2026-72365, CVE-2026-72367, CVE-2026-72368,\nCVE-2026-72369, CVE-2026-72370, CVE-2026-72371, CVE-2026-72372,\nCVE-2026-72373, CVE-2026-72374, CVE-2026-72375, CVE-2026-72376,\nCVE-2026-72377, CVE-2026-72378, CVE-2026-72379, CVE-2026-72380,\nCVE-2026-72382, CVE-2026-72383, CVE-2026-72384, CVE-2026-72385,\nCVE-2026-72386, CVE-2026-72387, CVE-2026-72388, CVE-2026-72389,\nCVE-2026-72390, CVE-2026-72391, CVE-2026-72392, CVE-2026-72394,\nCVE-2026-72395, CVE-2026-72396, CVE-2026-72397, CVE-2026-72400,\nCVE-2026-72401, CVE-2026-72402, CVE-2026-72403, CVE-2026-72405,\nCVE-2026-72406, CVE-2026-72407, CVE-2026-72408, CVE-2026-72409,\nCVE-2026-72410, CVE-2026-72413, CVE-2026-72414, CVE-2026-72415,\nCVE-2026-72416, CVE-2026-72418, CVE-2026-72419, CVE-2026-72420,\nCVE-2026-72421, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425,\nCVE-2026-72427, CVE-2026-72428, CVE-2026-72430, CVE-2026-72431,\nCVE-2026-72433, CVE-2026-72434, CVE-2026-72435, CVE-2026-72437,\nCVE-2026-72438, CVE-2026-72439, CVE-2026-72440, CVE-2026-72441,\nCVE-2026-72443, CVE-2026-72444, CVE-2026-72445, CVE-2026-72446,\nCVE-2026-72447, CVE-2026-72448, CVE-2026-72449, CVE-2026-72450,\nCVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455,\nCVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72464,\nCVE-2026-72465, CVE-2026-72467, CVE-2026-72468, CVE-2026-72469,\nCVE-2026-72470, CVE-2026-72471, CVE-2026-72474, CVE-2026-72475,\nCVE-2026-72476, CVE-2026-72478, CVE-2026-72479, CVE-2026-72480,\nCVE-2026-72481, CVE-2026-72482, CVE-2026-72483, CVE-2026-72484,\nCVE-2026-72485, CVE-2026-72486, CVE-2026-72487, CVE-2026-72488,\nCVE-2026-72489, CVE-2026-72492, CVE-2026-72498, CVE-2026-72499,\nCVE-2026-72500, CVE-2026-72502, CVE-2026-74256, CVE-2026-74257,\nCVE-2026-74258, CVE-2026-74260, CVE-2026-74261, CVE-2026-74262,\nCVE-2026-74263, CVE-2026-74264, CVE-2026-74265, CVE-2026-74266,\nCVE-2026-74270, CVE-2026-74271, CVE-2026-74272, CVE-2026-74273,\nCVE-2026-74274, CVE-2026-74276, CVE-2026-74277, CVE-2026-74278,\nCVE-2026-74279, CVE-2026-74280, CVE-2026-74281, CVE-2026-74282,\nCVE-2026-74283, CVE-2026-74284, CVE-2026-74286, CVE-2026-74288,\nCVE-2026-74289, CVE-2026-74290, CVE-2026-74291, CVE-2026-74292,\nCVE-2026-74293, CVE-2026-74294, CVE-2026-74295, CVE-2026-74296,\nCVE-2026-74297, CVE-2026-74300, CVE-2026-74301, CVE-2026-74302,\nCVE-2026-74303, CVE-2026-74304, CVE-2026-74305, CVE-2026-74306,\nCVE-2026-74307, CVE-2026-74308, CVE-2026-74309, CVE-2026-74311,\nCVE-2026-74312, CVE-2026-74313, CVE-2026-74314, CVE-2026-74316,\nCVE-2026-74317, CVE-2026-74318, CVE-2026-74320, CVE-2026-74321,\nCVE-2026-74322, CVE-2026-74323, CVE-2026-74324, CVE-2026-74325,\nCVE-2026-74327, CVE-2026-74328, CVE-2026-74329, CVE-2026-74330,\nCVE-2026-74331, CVE-2026-74332, CVE-2026-74333, CVE-2026-74334,\nCVE-2026-74335, CVE-2026-74336, CVE-2026-74337, CVE-2026-74338,\nCVE-2026-74339, CVE-2026-74340, CVE-2026-74341, CVE-2026-74344,\nCVE-2026-74346, CVE-2026-74347, CVE-2026-74348, CVE-2026-74349,\nCVE-2026-74351, CVE-2026-74352, CVE-2026-74353, CVE-2026-74354,\nCVE-2026-74355, CVE-2026-74356, CVE-2026-74358, CVE-2026-74359,\nCVE-2026-74360, CVE-2026-74362, CVE-2026-74363, CVE-2026-74364,\nCVE-2026-74365, CVE-2026-74366, CVE-2026-74367, CVE-2026-74368,\nCVE-2026-74370, CVE-2026-74371, CVE-2026-74372, CVE-2026-74373,\nCVE-2026-74374, CVE-2026-74375, CVE-2026-74377, CVE-2026-74378,\nCVE-2026-74379, CVE-2026-74380, CVE-2026-74381, CVE-2026-74382,\nCVE-2026-74383, CVE-2026-74385, CVE-2026-74386, CVE-2026-74387,\nCVE-2026-74388, CVE-2026-74389, CVE-2026-74390, CVE-2026-74391,\nCVE-2026-74392, CVE-2026-74393, CVE-2026-74395, CVE-2026-74396,\nCVE-2026-74397, CVE-2026-74399, CVE-2026-74400, CVE-2026-74402,\nCVE-2026-74403, CVE-2026-74404, CVE-2026-74405, CVE-2026-74407,\nCVE-2026-74408, CVE-2026-74409, CVE-2026-74410, CVE-2026-74411,\nCVE-2026-74412, CVE-2026-74413, CVE-2026-74415, CVE-2026-74416,\nCVE-2026-74417, CVE-2026-74419, CVE-2026-74420, CVE-2026-74421,\nCVE-2026-74422, CVE-2026-74423, CVE-2026-74424, CVE-2026-74425,\nCVE-2026-74426, CVE-2026-74429, CVE-2026-74430, CVE-2026-74431,\nCVE-2026-74432, CVE-2026-74435, CVE-2026-74437, CVE-2026-74438,\nCVE-2026-80592, CVE-2026-80593, CVE-2026-80594, CVE-2026-80595,\nCVE-2026-80596, CVE-2026-80597, CVE-2026-80598, CVE-2026-80599,\nCVE-2026-80600, CVE-2026-80601, CVE-2026-80602, CVE-2026-80603,\nCVE-2026-80604, CVE-2026-80605, CVE-2026-80606, CVE-2026-80607,\nCVE-2026-80609, CVE-2026-80610, CVE-2026-80611, CVE-2026-80612,\nCVE-2026-80613, CVE-2026-80614, CVE-2026-80615, CVE-2026-80616,\nCVE-2026-80617, CVE-2026-80618, CVE-2026-80619, CVE-2026-80620,\nCVE-2026-80621, CVE-2026-80622, CVE-2026-80623, CVE-2026-80624,\nCVE-2026-80625, CVE-2026-80626, CVE-2026-80627, CVE-2026-80628,\nCVE-2026-80629, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634,\nCVE-2026-80635, CVE-2026-80636, CVE-2026-80637, CVE-2026-80638,\nCVE-2026-80639, CVE-2026-80640, CVE-2026-80641, CVE-2026-80642,\nCVE-2026-80643, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646,\nCVE-2026-80647, CVE-2026-80648, CVE-2026-80649, CVE-2026-80650,\nCVE-2026-80651, CVE-2026-80652, CVE-2026-80653, CVE-2026-80654,\nCVE-2026-80655, CVE-2026-80657, CVE-2026-80658, CVE-2026-80659,\nCVE-2026-80660, CVE-2026-80661, CVE-2026-80662, CVE-2026-80663,\nCVE-2026-80664, CVE-2026-80666, CVE-2026-80667, CVE-2026-80668,\nCVE-2026-80669, CVE-2026-80670, CVE-2026-80671, CVE-2026-80675,\nCVE-2026-80676, CVE-2026-80677, CVE-2026-80865, CVE-2026-80866,\nCVE-2026-80867, CVE-2026-80868, CVE-2026-80870, CVE-2026-80871,\nCVE-2026-80872, CVE-2026-80873, CVE-2026-80874, CVE-2026-80875,\nCVE-2026-80876, CVE-2026-80877, CVE-2026-80878, CVE-2026-80879,\nCVE-2026-80880, CVE-2026-80881, CVE-2026-80882, CVE-2026-80883,\nCVE-2026-80884, CVE-2026-80885, CVE-2026-80886, CVE-2026-89774,\nCVE-2026-92502)\n","status":"published","published":"2026-10-08T12:50:56Z","modified":"2026-11-09T12:47:58.962989923Z","updated_at":"2026-11-09T13:27:44.240817Z"},{"id":"USN-8887-3","title":"linux-gcp-7.0, linux-hwe-7.0, linux-oracle-7.0 vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIB drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - MediaTek PM domains;\n  - Power supply drivers;\n  - PTP clock framework;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - Reset controller framework;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SoundWire subsystem;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB DSL drivers;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Proc file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - File system encryption (fscrypt);\n  - MAC80211 subsystem;\n  - Live Update Orchestrator (LUO);\n  - Mellanox drivers;\n  - Networking core;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IPv4 networking;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - User-space API (UAPI);\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kexec HandOver (KHO);\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Codetag library;\n  - Resizable hashtable library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - AMD SoC Alsa drivers;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - QCOM ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2026-64349, CVE-2026-64532, CVE-2026-64533, CVE-2026-64537,\nCVE-2026-64538, CVE-2026-64539, CVE-2026-64540, CVE-2026-64542,\nCVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,\nCVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,\nCVE-2026-64552, CVE-2026-64553, CVE-2026-64554, CVE-2026-64555,\nCVE-2026-64557, CVE-2026-64558, CVE-2026-64559, CVE-2026-64560,\nCVE-2026-64561, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564,\nCVE-2026-64565, CVE-2026-64566, CVE-2026-64567, CVE-2026-64568,\nCVE-2026-64569, CVE-2026-64570, CVE-2026-64571, CVE-2026-64572,\nCVE-2026-64573, CVE-2026-64574, CVE-2026-64575, CVE-2026-64576,\nCVE-2026-64577, CVE-2026-64578, CVE-2026-64579, CVE-2026-64580,\nCVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64585, CVE-2026-64586, CVE-2026-68081, CVE-2026-68082,\nCVE-2026-68093, CVE-2026-68095, CVE-2026-68096, CVE-2026-68097,\nCVE-2026-68098, CVE-2026-68099, CVE-2026-68100, CVE-2026-68104,\nCVE-2026-68105, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68109, CVE-2026-68110, CVE-2026-68111, CVE-2026-68112,\nCVE-2026-68113, CVE-2026-68114, CVE-2026-68115, CVE-2026-68116,\nCVE-2026-68117, CVE-2026-68118, CVE-2026-68119, CVE-2026-68120,\nCVE-2026-68121, CVE-2026-68122, CVE-2026-68123, CVE-2026-68124,\nCVE-2026-68125, CVE-2026-68126, CVE-2026-68127, CVE-2026-68128,\nCVE-2026-68129, CVE-2026-68130, CVE-2026-68131, CVE-2026-68132,\nCVE-2026-68133, CVE-2026-68134, CVE-2026-68135, CVE-2026-68136,\nCVE-2026-68137, CVE-2026-68138, CVE-2026-68139, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68145, CVE-2026-68146, CVE-2026-68147, CVE-2026-68148,\nCVE-2026-68149, CVE-2026-68150, CVE-2026-68151, CVE-2026-68152,\nCVE-2026-68153, CVE-2026-68154, CVE-2026-68155, CVE-2026-68156,\nCVE-2026-68157, CVE-2026-68158, CVE-2026-68159, CVE-2026-68160,\nCVE-2026-68161, CVE-2026-68162, CVE-2026-68163, CVE-2026-68164,\nCVE-2026-68165, CVE-2026-68166, CVE-2026-68168, CVE-2026-68169,\nCVE-2026-68170, CVE-2026-68172, CVE-2026-68173, CVE-2026-68174,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68177, CVE-2026-68178,\nCVE-2026-68179, CVE-2026-68180, CVE-2026-68181, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68189, CVE-2026-68190, CVE-2026-68191,\nCVE-2026-68192, CVE-2026-68193, CVE-2026-68194, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68198, CVE-2026-68199,\nCVE-2026-68200, CVE-2026-68201, CVE-2026-68202, CVE-2026-68203,\nCVE-2026-68204, CVE-2026-68205, CVE-2026-68206, CVE-2026-68207,\nCVE-2026-68208, CVE-2026-68209, CVE-2026-68210, CVE-2026-68211,\nCVE-2026-68212, CVE-2026-68213, CVE-2026-68214, CVE-2026-68215,\nCVE-2026-68216, CVE-2026-68217, CVE-2026-68218, CVE-2026-68219,\nCVE-2026-68220, CVE-2026-68221, CVE-2026-68222, CVE-2026-68223,\nCVE-2026-68224, CVE-2026-68225, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68228, CVE-2026-68229, CVE-2026-68230, CVE-2026-68231,\nCVE-2026-68232, CVE-2026-68233, CVE-2026-68234, CVE-2026-68235,\nCVE-2026-68236, CVE-2026-68237, CVE-2026-68238, CVE-2026-68239,\nCVE-2026-68240, CVE-2026-68241, CVE-2026-68242, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68245, CVE-2026-68246, CVE-2026-68247,\nCVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68251,\nCVE-2026-68252, CVE-2026-68253, CVE-2026-68254, CVE-2026-68255,\nCVE-2026-68256, CVE-2026-68257, CVE-2026-68258, CVE-2026-68259,\nCVE-2026-68260, CVE-2026-68261, CVE-2026-68262, CVE-2026-68263,\nCVE-2026-68264, CVE-2026-68265, CVE-2026-68266, CVE-2026-68267,\nCVE-2026-68268, CVE-2026-68269, CVE-2026-68270, CVE-2026-68271,\nCVE-2026-68272, CVE-2026-68273, CVE-2026-68274, CVE-2026-68275,\nCVE-2026-68276, CVE-2026-68277, CVE-2026-68278, CVE-2026-68279,\nCVE-2026-68280, CVE-2026-68281, CVE-2026-68282, CVE-2026-68283,\nCVE-2026-68284, CVE-2026-68286, CVE-2026-68287, CVE-2026-68288,\nCVE-2026-68289, CVE-2026-68290, CVE-2026-68291, CVE-2026-68292,\nCVE-2026-68293, CVE-2026-68294, CVE-2026-68296, CVE-2026-68297,\nCVE-2026-68298, CVE-2026-68299, CVE-2026-68300, CVE-2026-68301,\nCVE-2026-68302, CVE-2026-68303, CVE-2026-68304, CVE-2026-68306,\nCVE-2026-68307, CVE-2026-68308, CVE-2026-68309, CVE-2026-68310,\nCVE-2026-68311, CVE-2026-68312, CVE-2026-68313, CVE-2026-68314,\nCVE-2026-68315, CVE-2026-68316, CVE-2026-68317, CVE-2026-68318,\nCVE-2026-68319, CVE-2026-68320, CVE-2026-68321, CVE-2026-68322,\nCVE-2026-68323, CVE-2026-68324, CVE-2026-68325, CVE-2026-68326,\nCVE-2026-68327, CVE-2026-68328, CVE-2026-68329, CVE-2026-68330,\nCVE-2026-68331, CVE-2026-68332, CVE-2026-68333, CVE-2026-68334,\nCVE-2026-68335, CVE-2026-68336, CVE-2026-68337, CVE-2026-68338,\nCVE-2026-68339, CVE-2026-68340, CVE-2026-68341, CVE-2026-68342,\nCVE-2026-68343, CVE-2026-68345, CVE-2026-68346, CVE-2026-68347,\nCVE-2026-68348, CVE-2026-68349, CVE-2026-68350, CVE-2026-68351,\nCVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68355,\nCVE-2026-68356, CVE-2026-68357, CVE-2026-68358, CVE-2026-68359,\nCVE-2026-68360, CVE-2026-68361, CVE-2026-68362, CVE-2026-68363,\nCVE-2026-68364, CVE-2026-68365, CVE-2026-68366, CVE-2026-68367,\nCVE-2026-68368, CVE-2026-68369, CVE-2026-68370, CVE-2026-68371,\nCVE-2026-68372, CVE-2026-68373, CVE-2026-68374, CVE-2026-68375,\nCVE-2026-68376, CVE-2026-68377, CVE-2026-68378, CVE-2026-68379,\nCVE-2026-68380, CVE-2026-68381, CVE-2026-68382, CVE-2026-68383,\nCVE-2026-68384, CVE-2026-68385, CVE-2026-68386, CVE-2026-68387,\nCVE-2026-68388, CVE-2026-68389, CVE-2026-68390, CVE-2026-68391,\nCVE-2026-68392, CVE-2026-68393, CVE-2026-68394, CVE-2026-68395,\nCVE-2026-68396, CVE-2026-68397, CVE-2026-68398, CVE-2026-68399,\nCVE-2026-68400, CVE-2026-68401, CVE-2026-68402, CVE-2026-68403,\nCVE-2026-68404, CVE-2026-68405, CVE-2026-68406, CVE-2026-68407,\nCVE-2026-68408, CVE-2026-68409, CVE-2026-68410, CVE-2026-68411,\nCVE-2026-68412, CVE-2026-68413, CVE-2026-68414, CVE-2026-68415,\nCVE-2026-68416, CVE-2026-68417, CVE-2026-68418, CVE-2026-68419,\nCVE-2026-68420, CVE-2026-68421, CVE-2026-68422, CVE-2026-68425,\nCVE-2026-68426, CVE-2026-68427, CVE-2026-68428, CVE-2026-68429,\nCVE-2026-68430, CVE-2026-68431, CVE-2026-68432, CVE-2026-68433,\nCVE-2026-68434, CVE-2026-68436, CVE-2026-68437, CVE-2026-68439,\nCVE-2026-68440, CVE-2026-68441, CVE-2026-68442, CVE-2026-68443,\nCVE-2026-68444, CVE-2026-68445, CVE-2026-68446, CVE-2026-68447,\nCVE-2026-68448, CVE-2026-68449, CVE-2026-68450, CVE-2026-68454,\nCVE-2026-68455, CVE-2026-68456, CVE-2026-68458, CVE-2026-68463,\nCVE-2026-68464, CVE-2026-68465, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68470, CVE-2026-68471, CVE-2026-68472,\nCVE-2026-68473, CVE-2026-68474, CVE-2026-68475, CVE-2026-68478,\nCVE-2026-68479, CVE-2026-68480, CVE-2026-72003, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72006, CVE-2026-72007, CVE-2026-72008,\nCVE-2026-72009, CVE-2026-72010, CVE-2026-72011, CVE-2026-72012,\nCVE-2026-72013, CVE-2026-72015, CVE-2026-72016, CVE-2026-72017,\nCVE-2026-72018, CVE-2026-72019, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72023, CVE-2026-72024, CVE-2026-72025, CVE-2026-72026,\nCVE-2026-72027, CVE-2026-72028, CVE-2026-72029, CVE-2026-72030,\nCVE-2026-72031, CVE-2026-72032, CVE-2026-72034, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72042, CVE-2026-72045, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72050, CVE-2026-72051,\nCVE-2026-72052, CVE-2026-72053, CVE-2026-72054, CVE-2026-72055,\nCVE-2026-72056, CVE-2026-72057, CVE-2026-72058, CVE-2026-72059,\nCVE-2026-72060, CVE-2026-72061, CVE-2026-72062, CVE-2026-72063,\nCVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72070,\nCVE-2026-72071, CVE-2026-72072, CVE-2026-72073, CVE-2026-72074,\nCVE-2026-72075, CVE-2026-72076, CVE-2026-72077, CVE-2026-72078,\nCVE-2026-72079, CVE-2026-72080, CVE-2026-72081, CVE-2026-72082,\nCVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,\nCVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093,\nCVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72099,\nCVE-2026-72100, CVE-2026-72101, CVE-2026-72102, CVE-2026-72103,\nCVE-2026-72104, CVE-2026-72105, CVE-2026-72106, CVE-2026-72107,\nCVE-2026-72108, CVE-2026-72109, CVE-2026-72110, CVE-2026-72111,\nCVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116,\nCVE-2026-72117, CVE-2026-72118, CVE-2026-72119, CVE-2026-72120,\nCVE-2026-72121, CVE-2026-72122, CVE-2026-72123, CVE-2026-72124,\nCVE-2026-72125, CVE-2026-72126, CVE-2026-72127, CVE-2026-72128,\nCVE-2026-72131, CVE-2026-72132, CVE-2026-72133, CVE-2026-72134,\nCVE-2026-72135, CVE-2026-72136, CVE-2026-72138, CVE-2026-72140,\nCVE-2026-72141, CVE-2026-72142, CVE-2026-72143, CVE-2026-72144,\nCVE-2026-72146, CVE-2026-72147, CVE-2026-72148, CVE-2026-72149,\nCVE-2026-72150, CVE-2026-72151, CVE-2026-72152, CVE-2026-72153,\nCVE-2026-72154, CVE-2026-72155, CVE-2026-72156, CVE-2026-72157,\nCVE-2026-72158, CVE-2026-72159, CVE-2026-72160, CVE-2026-72161,\nCVE-2026-72162, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72168, CVE-2026-72169,\nCVE-2026-72170, CVE-2026-72171, CVE-2026-72172, CVE-2026-72173,\nCVE-2026-72174, CVE-2026-72175, CVE-2026-72176, CVE-2026-72177,\nCVE-2026-72178, CVE-2026-72179, CVE-2026-72180, CVE-2026-72181,\nCVE-2026-72182, CVE-2026-72183, CVE-2026-72193, CVE-2026-72195,\nCVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213,\nCVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72218,\nCVE-2026-72219, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72227, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230,\nCVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72235,\nCVE-2026-72236, CVE-2026-72237, CVE-2026-72238, CVE-2026-72240,\nCVE-2026-72241, CVE-2026-72242, CVE-2026-72243, CVE-2026-72244,\nCVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72252,\nCVE-2026-72253, CVE-2026-72254, CVE-2026-72255, CVE-2026-72256,\nCVE-2026-72257, CVE-2026-72258, CVE-2026-72259, CVE-2026-72260,\nCVE-2026-72261, CVE-2026-72262, CVE-2026-72263, CVE-2026-72264,\nCVE-2026-72265, CVE-2026-72266, CVE-2026-72267, CVE-2026-72268,\nCVE-2026-72269, CVE-2026-72270, CVE-2026-72271, CVE-2026-72272,\nCVE-2026-72273, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,\nCVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284,\nCVE-2026-72285, CVE-2026-72286, CVE-2026-72290, CVE-2026-72292,\nCVE-2026-72293, CVE-2026-72297, CVE-2026-72298, CVE-2026-72300,\nCVE-2026-72301, CVE-2026-72302, CVE-2026-72303, CVE-2026-72304,\nCVE-2026-72305, CVE-2026-72306, CVE-2026-72307, CVE-2026-72308,\nCVE-2026-72310, CVE-2026-72312, CVE-2026-72313, CVE-2026-72314,\nCVE-2026-72315, CVE-2026-72316, CVE-2026-72321, CVE-2026-72324,\nCVE-2026-72325, CVE-2026-72326, CVE-2026-72327, CVE-2026-72328,\nCVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337,\nCVE-2026-72338, CVE-2026-72340, CVE-2026-72341, CVE-2026-72342,\nCVE-2026-72343, CVE-2026-72345, CVE-2026-72347, CVE-2026-72349,\nCVE-2026-72350, CVE-2026-72352, CVE-2026-72356, CVE-2026-72357,\nCVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363,\nCVE-2026-72364, CVE-2026-72365, CVE-2026-72367, CVE-2026-72368,\nCVE-2026-72369, CVE-2026-72370, CVE-2026-72371, CVE-2026-72372,\nCVE-2026-72373, CVE-2026-72374, CVE-2026-72375, CVE-2026-72376,\nCVE-2026-72377, CVE-2026-72378, CVE-2026-72379, CVE-2026-72380,\nCVE-2026-72382, CVE-2026-72383, CVE-2026-72384, CVE-2026-72385,\nCVE-2026-72386, CVE-2026-72387, CVE-2026-72388, CVE-2026-72389,\nCVE-2026-72390, CVE-2026-72391, CVE-2026-72392, CVE-2026-72394,\nCVE-2026-72395, CVE-2026-72396, CVE-2026-72397, CVE-2026-72400,\nCVE-2026-72401, CVE-2026-72402, CVE-2026-72403, CVE-2026-72405,\nCVE-2026-72406, CVE-2026-72407, CVE-2026-72408, CVE-2026-72409,\nCVE-2026-72410, CVE-2026-72413, CVE-2026-72414, CVE-2026-72415,\nCVE-2026-72416, CVE-2026-72418, CVE-2026-72419, CVE-2026-72420,\nCVE-2026-72421, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425,\nCVE-2026-72427, CVE-2026-72428, CVE-2026-72430, CVE-2026-72431,\nCVE-2026-72433, CVE-2026-72434, CVE-2026-72435, CVE-2026-72437,\nCVE-2026-72438, CVE-2026-72439, CVE-2026-72440, CVE-2026-72441,\nCVE-2026-72443, CVE-2026-72444, CVE-2026-72445, CVE-2026-72446,\nCVE-2026-72447, CVE-2026-72448, CVE-2026-72449, CVE-2026-72450,\nCVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455,\nCVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72464,\nCVE-2026-72465, CVE-2026-72467, CVE-2026-72468, CVE-2026-72469,\nCVE-2026-72470, CVE-2026-72471, CVE-2026-72474, CVE-2026-72475,\nCVE-2026-72476, CVE-2026-72478, CVE-2026-72479, CVE-2026-72480,\nCVE-2026-72481, CVE-2026-72482, CVE-2026-72483, CVE-2026-72484,\nCVE-2026-72485, CVE-2026-72486, CVE-2026-72487, CVE-2026-72488,\nCVE-2026-72489, CVE-2026-72492, CVE-2026-72498, CVE-2026-72499,\nCVE-2026-72500, CVE-2026-72502, CVE-2026-74256, CVE-2026-74257,\nCVE-2026-74258, CVE-2026-74260, CVE-2026-74261, CVE-2026-74262,\nCVE-2026-74263, CVE-2026-74264, CVE-2026-74265, CVE-2026-74266,\nCVE-2026-74270, CVE-2026-74271, CVE-2026-74272, CVE-2026-74273,\nCVE-2026-74274, CVE-2026-74276, CVE-2026-74277, CVE-2026-74278,\nCVE-2026-74279, CVE-2026-74280, CVE-2026-74281, CVE-2026-74282,\nCVE-2026-74283, CVE-2026-74284, CVE-2026-74286, CVE-2026-74288,\nCVE-2026-74289, CVE-2026-74290, CVE-2026-74291, CVE-2026-74292,\nCVE-2026-74293, CVE-2026-74294, CVE-2026-74295, CVE-2026-74296,\nCVE-2026-74297, CVE-2026-74300, CVE-2026-74301, CVE-2026-74302,\nCVE-2026-74303, CVE-2026-74304, CVE-2026-74305, CVE-2026-74306,\nCVE-2026-74307, CVE-2026-74308, CVE-2026-74309, CVE-2026-74311,\nCVE-2026-74312, CVE-2026-74313, CVE-2026-74314, CVE-2026-74316,\nCVE-2026-74317, CVE-2026-74318, CVE-2026-74320, CVE-2026-74321,\nCVE-2026-74322, CVE-2026-74323, CVE-2026-74324, CVE-2026-74325,\nCVE-2026-74327, CVE-2026-74328, CVE-2026-74329, CVE-2026-74330,\nCVE-2026-74331, CVE-2026-74332, CVE-2026-74333, CVE-2026-74334,\nCVE-2026-74335, CVE-2026-74336, CVE-2026-74337, CVE-2026-74338,\nCVE-2026-74339, CVE-2026-74340, CVE-2026-74341, CVE-2026-74344,\nCVE-2026-74346, CVE-2026-74347, CVE-2026-74348, CVE-2026-74349,\nCVE-2026-74351, CVE-2026-74352, CVE-2026-74353, CVE-2026-74354,\nCVE-2026-74355, CVE-2026-74356, CVE-2026-74358, CVE-2026-74359,\nCVE-2026-74360, CVE-2026-74362, CVE-2026-74363, CVE-2026-74364,\nCVE-2026-74365, CVE-2026-74366, CVE-2026-74367, CVE-2026-74368,\nCVE-2026-74370, CVE-2026-74371, CVE-2026-74372, CVE-2026-74373,\nCVE-2026-74374, CVE-2026-74375, CVE-2026-74377, CVE-2026-74378,\nCVE-2026-74379, CVE-2026-74380, CVE-2026-74381, CVE-2026-74382,\nCVE-2026-74383, CVE-2026-74385, CVE-2026-74386, CVE-2026-74387,\nCVE-2026-74388, CVE-2026-74389, CVE-2026-74390, CVE-2026-74391,\nCVE-2026-74392, CVE-2026-74393, CVE-2026-74395, CVE-2026-74396,\nCVE-2026-74397, CVE-2026-74399, CVE-2026-74400, CVE-2026-74402,\nCVE-2026-74403, CVE-2026-74404, CVE-2026-74405, CVE-2026-74407,\nCVE-2026-74408, CVE-2026-74409, CVE-2026-74410, CVE-2026-74411,\nCVE-2026-74412, CVE-2026-74413, CVE-2026-74415, CVE-2026-74416,\nCVE-2026-74417, CVE-2026-74419, CVE-2026-74420, CVE-2026-74421,\nCVE-2026-74422, CVE-2026-74423, CVE-2026-74424, CVE-2026-74425,\nCVE-2026-74426, CVE-2026-74429, CVE-2026-74430, CVE-2026-74431,\nCVE-2026-74432, CVE-2026-74435, CVE-2026-74437, CVE-2026-74438,\nCVE-2026-80592, CVE-2026-80593, CVE-2026-80594, CVE-2026-80595,\nCVE-2026-80596, CVE-2026-80597, CVE-2026-80598, CVE-2026-80599,\nCVE-2026-80600, CVE-2026-80601, CVE-2026-80602, CVE-2026-80603,\nCVE-2026-80604, CVE-2026-80605, CVE-2026-80606, CVE-2026-80607,\nCVE-2026-80609, CVE-2026-80610, CVE-2026-80611, CVE-2026-80612,\nCVE-2026-80613, CVE-2026-80614, CVE-2026-80615, CVE-2026-80616,\nCVE-2026-80617, CVE-2026-80618, CVE-2026-80619, CVE-2026-80620,\nCVE-2026-80621, CVE-2026-80622, CVE-2026-80623, CVE-2026-80624,\nCVE-2026-80625, CVE-2026-80626, CVE-2026-80627, CVE-2026-80628,\nCVE-2026-80629, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634,\nCVE-2026-80635, CVE-2026-80636, CVE-2026-80637, CVE-2026-80638,\nCVE-2026-80639, CVE-2026-80640, CVE-2026-80641, CVE-2026-80642,\nCVE-2026-80643, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646,\nCVE-2026-80647, CVE-2026-80648, CVE-2026-80649, CVE-2026-80650,\nCVE-2026-80651, CVE-2026-80652, CVE-2026-80653, CVE-2026-80654,\nCVE-2026-80655, CVE-2026-80657, CVE-2026-80658, CVE-2026-80659,\nCVE-2026-80660, CVE-2026-80661, CVE-2026-80662, CVE-2026-80663,\nCVE-2026-80664, CVE-2026-80666, CVE-2026-80667, CVE-2026-80668,\nCVE-2026-80669, CVE-2026-80670, CVE-2026-80671, CVE-2026-80675,\nCVE-2026-80676, CVE-2026-80677, CVE-2026-80865, CVE-2026-80866,\nCVE-2026-80867, CVE-2026-80868, CVE-2026-80870, CVE-2026-80871,\nCVE-2026-80872, CVE-2026-80873, CVE-2026-80874, CVE-2026-80875,\nCVE-2026-80876, CVE-2026-80877, CVE-2026-80878, CVE-2026-80879,\nCVE-2026-80880, CVE-2026-80881, CVE-2026-80882, CVE-2026-80883,\nCVE-2026-80884, CVE-2026-80885, CVE-2026-80886, CVE-2026-89774,\nCVE-2026-92502)\n","status":"published","published":"2026-10-09T08:38:46Z","modified":"2026-11-09T12:48:16.486164323Z","updated_at":"2026-11-09T13:27:44.240817Z"},{"id":"USN-8888-1","title":"linux-azure, linux-azure-fde vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIB drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - MediaTek PM domains;\n  - Power supply drivers;\n  - PTP clock framework;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - Reset controller framework;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SoundWire subsystem;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB DSL drivers;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Overlay file system;\n  - Proc file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - File system encryption (fscrypt);\n  - MAC80211 subsystem;\n  - IPv4 networking;\n  - Live Update Orchestrator (LUO);\n  - Mellanox drivers;\n  - Networking core;\n  - Sun RPC protocol;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IP tunnels definitions;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - User-space API (UAPI);\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kexec HandOver (KHO);\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Codetag library;\n  - Resizable hashtable library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - AMD SoC Alsa drivers;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - QCOM ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2026-64349, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533,\nCVE-2026-64534, CVE-2026-64535, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64539, CVE-2026-64540, CVE-2026-64541, CVE-2026-64542,\nCVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,\nCVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,\nCVE-2026-64551, CVE-2026-64552, CVE-2026-64553, CVE-2026-64554,\nCVE-2026-64555, CVE-2026-64557, CVE-2026-64558, CVE-2026-64559,\nCVE-2026-64560, CVE-2026-64561, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64566, CVE-2026-64567,\nCVE-2026-64568, CVE-2026-64569, CVE-2026-64570, CVE-2026-64571,\nCVE-2026-64572, CVE-2026-64573, CVE-2026-64574, CVE-2026-64575,\nCVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64579,\nCVE-2026-64580, CVE-2026-64581, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64585, CVE-2026-64586, CVE-2026-68081,\nCVE-2026-68082, CVE-2026-68083, CVE-2026-68093, CVE-2026-68095,\nCVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68099,\nCVE-2026-68100, CVE-2026-68104, CVE-2026-68105, CVE-2026-68106,\nCVE-2026-68107, CVE-2026-68108, CVE-2026-68109, CVE-2026-68110,\nCVE-2026-68111, CVE-2026-68112, CVE-2026-68113, CVE-2026-68114,\nCVE-2026-68115, CVE-2026-68116, CVE-2026-68117, CVE-2026-68118,\nCVE-2026-68119, CVE-2026-68120, CVE-2026-68121, CVE-2026-68122,\nCVE-2026-68123, CVE-2026-68124, CVE-2026-68125, CVE-2026-68126,\nCVE-2026-68127, CVE-2026-68128, CVE-2026-68129, CVE-2026-68130,\nCVE-2026-68131, CVE-2026-68132, CVE-2026-68133, CVE-2026-68134,\nCVE-2026-68135, CVE-2026-68136, CVE-2026-68137, CVE-2026-68138,\nCVE-2026-68139, CVE-2026-68140, CVE-2026-68141, CVE-2026-68142,\nCVE-2026-68143, CVE-2026-68144, CVE-2026-68145, CVE-2026-68146,\nCVE-2026-68147, CVE-2026-68148, CVE-2026-68149, CVE-2026-68150,\nCVE-2026-68151, CVE-2026-68152, CVE-2026-68153, CVE-2026-68154,\nCVE-2026-68155, CVE-2026-68156, CVE-2026-68157, CVE-2026-68158,\nCVE-2026-68159, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162,\nCVE-2026-68163, CVE-2026-68164, CVE-2026-68165, CVE-2026-68166,\nCVE-2026-68168, CVE-2026-68169, CVE-2026-68170, CVE-2026-68172,\nCVE-2026-68173, CVE-2026-68174, CVE-2026-68175, CVE-2026-68176,\nCVE-2026-68177, CVE-2026-68178, CVE-2026-68179, CVE-2026-68180,\nCVE-2026-68181, CVE-2026-68182, CVE-2026-68183, CVE-2026-68184,\nCVE-2026-68186, CVE-2026-68187, CVE-2026-68188, CVE-2026-68189,\nCVE-2026-68190, CVE-2026-68191, CVE-2026-68192, CVE-2026-68193,\nCVE-2026-68194, CVE-2026-68195, CVE-2026-68196, CVE-2026-68197,\nCVE-2026-68198, CVE-2026-68199, CVE-2026-68200, CVE-2026-68201,\nCVE-2026-68202, CVE-2026-68203, CVE-2026-68204, CVE-2026-68205,\nCVE-2026-68206, CVE-2026-68207, CVE-2026-68208, CVE-2026-68209,\nCVE-2026-68210, CVE-2026-68211, CVE-2026-68212, CVE-2026-68213,\nCVE-2026-68214, CVE-2026-68215, CVE-2026-68216, CVE-2026-68217,\nCVE-2026-68218, CVE-2026-68219, CVE-2026-68220, CVE-2026-68221,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68224, CVE-2026-68225,\nCVE-2026-68226, CVE-2026-68227, CVE-2026-68228, CVE-2026-68229,\nCVE-2026-68230, CVE-2026-68231, CVE-2026-68232, CVE-2026-68233,\nCVE-2026-68234, CVE-2026-68235, CVE-2026-68236, CVE-2026-68237,\nCVE-2026-68238, CVE-2026-68239, CVE-2026-68240, CVE-2026-68241,\nCVE-2026-68242, CVE-2026-68243, CVE-2026-68244, CVE-2026-68245,\nCVE-2026-68246, CVE-2026-68247, CVE-2026-68248, CVE-2026-68249,\nCVE-2026-68250, CVE-2026-68251, CVE-2026-68252, CVE-2026-68253,\nCVE-2026-68254, CVE-2026-68255, CVE-2026-68256, CVE-2026-68257,\nCVE-2026-68258, CVE-2026-68259, CVE-2026-68260, CVE-2026-68261,\nCVE-2026-68262, CVE-2026-68263, CVE-2026-68264, CVE-2026-68265,\nCVE-2026-68266, CVE-2026-68267, CVE-2026-68268, CVE-2026-68269,\nCVE-2026-68270, CVE-2026-68271, CVE-2026-68272, CVE-2026-68273,\nCVE-2026-68274, CVE-2026-68275, CVE-2026-68276, CVE-2026-68277,\nCVE-2026-68278, CVE-2026-68279, CVE-2026-68280, CVE-2026-68281,\nCVE-2026-68282, CVE-2026-68283, CVE-2026-68284, CVE-2026-68286,\nCVE-2026-68287, CVE-2026-68288, CVE-2026-68289, CVE-2026-68290,\nCVE-2026-68291, CVE-2026-68292, CVE-2026-68293, CVE-2026-68294,\nCVE-2026-68296, CVE-2026-68297, CVE-2026-68298, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68302, CVE-2026-68303,\nCVE-2026-68304, CVE-2026-68306, CVE-2026-68307, CVE-2026-68308,\nCVE-2026-68309, CVE-2026-68310, CVE-2026-68311, CVE-2026-68312,\nCVE-2026-68313, CVE-2026-68314, CVE-2026-68315, CVE-2026-68316,\nCVE-2026-68317, CVE-2026-68318, CVE-2026-68319, CVE-2026-68320,\nCVE-2026-68321, CVE-2026-68322, CVE-2026-68323, CVE-2026-68324,\nCVE-2026-68325, CVE-2026-68326, CVE-2026-68327, CVE-2026-68328,\nCVE-2026-68329, CVE-2026-68330, CVE-2026-68331, CVE-2026-68332,\nCVE-2026-68333, CVE-2026-68334, CVE-2026-68335, CVE-2026-68336,\nCVE-2026-68337, CVE-2026-68338, CVE-2026-68339, CVE-2026-68340,\nCVE-2026-68341, CVE-2026-68342, CVE-2026-68343, CVE-2026-68345,\nCVE-2026-68346, CVE-2026-68347, CVE-2026-68348, CVE-2026-68349,\nCVE-2026-68350, CVE-2026-68351, CVE-2026-68352, CVE-2026-68353,\nCVE-2026-68354, CVE-2026-68355, CVE-2026-68356, CVE-2026-68357,\nCVE-2026-68358, CVE-2026-68359, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68362, CVE-2026-68363, CVE-2026-68364, CVE-2026-68365,\nCVE-2026-68366, CVE-2026-68367, CVE-2026-68368, CVE-2026-68369,\nCVE-2026-68370, CVE-2026-68371, CVE-2026-68372, CVE-2026-68373,\nCVE-2026-68374, CVE-2026-68375, CVE-2026-68376, CVE-2026-68377,\nCVE-2026-68378, CVE-2026-68379, CVE-2026-68380, CVE-2026-68381,\nCVE-2026-68382, CVE-2026-68383, CVE-2026-68384, CVE-2026-68385,\nCVE-2026-68386, CVE-2026-68387, CVE-2026-68388, CVE-2026-68389,\nCVE-2026-68390, CVE-2026-68391, CVE-2026-68392, CVE-2026-68393,\nCVE-2026-68394, CVE-2026-68395, CVE-2026-68396, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68399, CVE-2026-68400, CVE-2026-68401,\nCVE-2026-68402, CVE-2026-68403, CVE-2026-68404, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68407, CVE-2026-68408, CVE-2026-68409,\nCVE-2026-68410, CVE-2026-68411, CVE-2026-68412, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68415, CVE-2026-68416, CVE-2026-68417,\nCVE-2026-68418, CVE-2026-68419, CVE-2026-68420, CVE-2026-68421,\nCVE-2026-68422, CVE-2026-68425, CVE-2026-68426, CVE-2026-68427,\nCVE-2026-68428, CVE-2026-68429, CVE-2026-68430, CVE-2026-68431,\nCVE-2026-68432, CVE-2026-68433, CVE-2026-68434, CVE-2026-68436,\nCVE-2026-68437, CVE-2026-68439, CVE-2026-68440, CVE-2026-68441,\nCVE-2026-68442, CVE-2026-68443, CVE-2026-68444, CVE-2026-68445,\nCVE-2026-68446, CVE-2026-68447, CVE-2026-68448, CVE-2026-68449,\nCVE-2026-68450, CVE-2026-68454, CVE-2026-68455, CVE-2026-68456,\nCVE-2026-68457, CVE-2026-68458, CVE-2026-68463, CVE-2026-68464,\nCVE-2026-68465, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469,\nCVE-2026-68470, CVE-2026-68471, CVE-2026-68472, CVE-2026-68473,\nCVE-2026-68474, CVE-2026-68475, CVE-2026-68476, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72003,\nCVE-2026-72004, CVE-2026-72005, CVE-2026-72006, CVE-2026-72007,\nCVE-2026-72008, CVE-2026-72009, CVE-2026-72010, CVE-2026-72011,\nCVE-2026-72012, CVE-2026-72013, CVE-2026-72014, CVE-2026-72015,\nCVE-2026-72016, CVE-2026-72017, CVE-2026-72018, CVE-2026-72019,\nCVE-2026-72020, CVE-2026-72021, CVE-2026-72022, CVE-2026-72023,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72026, CVE-2026-72027,\nCVE-2026-72028, CVE-2026-72029, CVE-2026-72030, CVE-2026-72031,\nCVE-2026-72032, CVE-2026-72033, CVE-2026-72034, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72041, CVE-2026-72042, CVE-2026-72045,\nCVE-2026-72046, CVE-2026-72047, CVE-2026-72048, CVE-2026-72049,\nCVE-2026-72050, CVE-2026-72051, CVE-2026-72052, CVE-2026-72053,\nCVE-2026-72054, CVE-2026-72055, CVE-2026-72056, CVE-2026-72057,\nCVE-2026-72058, CVE-2026-72059, CVE-2026-72060, CVE-2026-72061,\nCVE-2026-72062, CVE-2026-72063, CVE-2026-72064, CVE-2026-72065,\nCVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72069,\nCVE-2026-72070, CVE-2026-72071, CVE-2026-72072, CVE-2026-72073,\nCVE-2026-72074, CVE-2026-72075, CVE-2026-72076, CVE-2026-72077,\nCVE-2026-72078, CVE-2026-72079, CVE-2026-72080, CVE-2026-72081,\nCVE-2026-72082, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085,\nCVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,\nCVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093,\nCVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72098,\nCVE-2026-72099, CVE-2026-72100, CVE-2026-72101, CVE-2026-72102,\nCVE-2026-72103, CVE-2026-72104, CVE-2026-72105, CVE-2026-72106,\nCVE-2026-72107, CVE-2026-72108, CVE-2026-72109, CVE-2026-72110,\nCVE-2026-72111, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72127,\nCVE-2026-72128, CVE-2026-72129, CVE-2026-72130, CVE-2026-72131,\nCVE-2026-72132, CVE-2026-72133, CVE-2026-72134, CVE-2026-72135,\nCVE-2026-72136, CVE-2026-72137, CVE-2026-72138, CVE-2026-72139,\nCVE-2026-72140, CVE-2026-72141, CVE-2026-72142, CVE-2026-72143,\nCVE-2026-72144, CVE-2026-72146, CVE-2026-72147, CVE-2026-72148,\nCVE-2026-72149, CVE-2026-72150, CVE-2026-72151, CVE-2026-72152,\nCVE-2026-72153, CVE-2026-72154, CVE-2026-72155, CVE-2026-72156,\nCVE-2026-72157, CVE-2026-72158, CVE-2026-72159, CVE-2026-72160,\nCVE-2026-72161, CVE-2026-72162, CVE-2026-72163, CVE-2026-72164,\nCVE-2026-72165, CVE-2026-72166, CVE-2026-72167, CVE-2026-72168,\nCVE-2026-72169, CVE-2026-72170, CVE-2026-72171, CVE-2026-72172,\nCVE-2026-72173, CVE-2026-72174, CVE-2026-72175, CVE-2026-72176,\nCVE-2026-72177, CVE-2026-72178, CVE-2026-72179, CVE-2026-72180,\nCVE-2026-72181, CVE-2026-72182, CVE-2026-72183, CVE-2026-72191,\nCVE-2026-72192, CVE-2026-72193, CVE-2026-72194, CVE-2026-72195,\nCVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213,\nCVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72217,\nCVE-2026-72218, CVE-2026-72219, CVE-2026-72220, CVE-2026-72221,\nCVE-2026-72222, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72226, CVE-2026-72227, CVE-2026-72228, CVE-2026-72229,\nCVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233,\nCVE-2026-72234, CVE-2026-72235, CVE-2026-72236, CVE-2026-72237,\nCVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72242,\nCVE-2026-72243, CVE-2026-72244, CVE-2026-72245, CVE-2026-72247,\nCVE-2026-72248, CVE-2026-72249, CVE-2026-72250, CVE-2026-72251,\nCVE-2026-72252, CVE-2026-72253, CVE-2026-72254, CVE-2026-72255,\nCVE-2026-72256, CVE-2026-72257, CVE-2026-72258, CVE-2026-72259,\nCVE-2026-72260, CVE-2026-72261, CVE-2026-72262, CVE-2026-72263,\nCVE-2026-72264, CVE-2026-72265, CVE-2026-72266, CVE-2026-72267,\nCVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,\nCVE-2026-72272, CVE-2026-72273, CVE-2026-72274, CVE-2026-72275,\nCVE-2026-72276, CVE-2026-72277, CVE-2026-72278, CVE-2026-72279,\nCVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284,\nCVE-2026-72285, CVE-2026-72286, CVE-2026-72287, CVE-2026-72288,\nCVE-2026-72289, CVE-2026-72290, CVE-2026-72292, CVE-2026-72293,\nCVE-2026-72296, CVE-2026-72297, CVE-2026-72298, CVE-2026-72299,\nCVE-2026-72300, CVE-2026-72301, CVE-2026-72302, CVE-2026-72303,\nCVE-2026-72304, CVE-2026-72305, CVE-2026-72306, CVE-2026-72307,\nCVE-2026-72308, CVE-2026-72310, CVE-2026-72312, CVE-2026-72313,\nCVE-2026-72314, CVE-2026-72315, CVE-2026-72316, CVE-2026-72317,\nCVE-2026-72318, CVE-2026-72319, CVE-2026-72320, CVE-2026-72321,\nCVE-2026-72322, CVE-2026-72323, CVE-2026-72324, CVE-2026-72325,\nCVE-2026-72326, CVE-2026-72327, CVE-2026-72328, CVE-2026-72329,\nCVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337,\nCVE-2026-72338, CVE-2026-72339, CVE-2026-72340, CVE-2026-72341,\nCVE-2026-72342, CVE-2026-72343, CVE-2026-72345, CVE-2026-72347,\nCVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351,\nCVE-2026-72352, CVE-2026-72355, CVE-2026-72356, CVE-2026-72357,\nCVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363,\nCVE-2026-72364, CVE-2026-72365, CVE-2026-72366, CVE-2026-72367,\nCVE-2026-72368, CVE-2026-72369, CVE-2026-72370, CVE-2026-72371,\nCVE-2026-72372, CVE-2026-72373, CVE-2026-72374, CVE-2026-72375,\nCVE-2026-72376, CVE-2026-72377, CVE-2026-72378, CVE-2026-72379,\nCVE-2026-72380, CVE-2026-72381, CVE-2026-72382, CVE-2026-72383,\nCVE-2026-72384, CVE-2026-72385, CVE-2026-72386, CVE-2026-72387,\nCVE-2026-72388, CVE-2026-72389, CVE-2026-72390, CVE-2026-72391,\nCVE-2026-72392, CVE-2026-72393, CVE-2026-72394, CVE-2026-72395,\nCVE-2026-72396, CVE-2026-72397, CVE-2026-72398, CVE-2026-72399,\nCVE-2026-72400, CVE-2026-72401, CVE-2026-72402, CVE-2026-72403,\nCVE-2026-72405, CVE-2026-72406, CVE-2026-72407, CVE-2026-72408,\nCVE-2026-72409, CVE-2026-72410, CVE-2026-72412, CVE-2026-72413,\nCVE-2026-72414, CVE-2026-72415, CVE-2026-72416, CVE-2026-72417,\nCVE-2026-72418, CVE-2026-72419, CVE-2026-72420, CVE-2026-72421,\nCVE-2026-72422, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425,\nCVE-2026-72427, CVE-2026-72428, CVE-2026-72429, CVE-2026-72430,\nCVE-2026-72431, CVE-2026-72433, CVE-2026-72434, CVE-2026-72435,\nCVE-2026-72436, CVE-2026-72437, CVE-2026-72438, CVE-2026-72439,\nCVE-2026-72440, CVE-2026-72441, CVE-2026-72442, CVE-2026-72443,\nCVE-2026-72444, CVE-2026-72445, CVE-2026-72446, CVE-2026-72447,\nCVE-2026-72448, CVE-2026-72449, CVE-2026-72450, CVE-2026-72451,\nCVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455,\nCVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72463,\nCVE-2026-72464, CVE-2026-72465, CVE-2026-72466, CVE-2026-72467,\nCVE-2026-72468, CVE-2026-72469, CVE-2026-72470, CVE-2026-72471,\nCVE-2026-72472, CVE-2026-72473, CVE-2026-72474, CVE-2026-72475,\nCVE-2026-72476, CVE-2026-72477, CVE-2026-72478, CVE-2026-72479,\nCVE-2026-72480, CVE-2026-72481, CVE-2026-72482, CVE-2026-72483,\nCVE-2026-72484, CVE-2026-72485, CVE-2026-72486, CVE-2026-72487,\nCVE-2026-72488, CVE-2026-72489, CVE-2026-72491, CVE-2026-72492,\nCVE-2026-72493, CVE-2026-72494, CVE-2026-72495, CVE-2026-72496,\nCVE-2026-72498, CVE-2026-72499, CVE-2026-72500, CVE-2026-72501,\nCVE-2026-72502, CVE-2026-74255, CVE-2026-74256, CVE-2026-74257,\nCVE-2026-74258, CVE-2026-74260, CVE-2026-74261, CVE-2026-74262,\nCVE-2026-74263, CVE-2026-74264, CVE-2026-74265, CVE-2026-74266,\nCVE-2026-74267, CVE-2026-74268, CVE-2026-74269, CVE-2026-74270,\nCVE-2026-74271, CVE-2026-74272, CVE-2026-74273, CVE-2026-74274,\nCVE-2026-74276, CVE-2026-74277, CVE-2026-74278, CVE-2026-74279,\nCVE-2026-74280, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283,\nCVE-2026-74284, CVE-2026-74286, CVE-2026-74287, CVE-2026-74288,\nCVE-2026-74289, CVE-2026-74290, CVE-2026-74291, CVE-2026-74292,\nCVE-2026-74293, CVE-2026-74294, CVE-2026-74295, CVE-2026-74296,\nCVE-2026-74297, CVE-2026-74300, CVE-2026-74301, CVE-2026-74302,\nCVE-2026-74303, CVE-2026-74304, CVE-2026-74305, CVE-2026-74306,\nCVE-2026-74307, CVE-2026-74308, CVE-2026-74309, CVE-2026-74310,\nCVE-2026-74311, CVE-2026-74312, CVE-2026-74313, CVE-2026-74314,\nCVE-2026-74316, CVE-2026-74317, CVE-2026-74318, CVE-2026-74320,\nCVE-2026-74321, CVE-2026-74322, CVE-2026-74323, CVE-2026-74324,\nCVE-2026-74325, CVE-2026-74327, CVE-2026-74328, CVE-2026-74329,\nCVE-2026-74330, CVE-2026-74331, CVE-2026-74332, CVE-2026-74333,\nCVE-2026-74334, CVE-2026-74335, CVE-2026-74336, CVE-2026-74337,\nCVE-2026-74338, CVE-2026-74339, CVE-2026-74340, CVE-2026-74341,\nCVE-2026-74344, CVE-2026-74345, CVE-2026-74346, CVE-2026-74347,\nCVE-2026-74348, CVE-2026-74349, CVE-2026-74350, CVE-2026-74351,\nCVE-2026-74352, CVE-2026-74353, CVE-2026-74354, CVE-2026-74355,\nCVE-2026-74356, CVE-2026-74358, CVE-2026-74359, CVE-2026-74360,\nCVE-2026-74361, CVE-2026-74362, CVE-2026-74363, CVE-2026-74364,\nCVE-2026-74365, CVE-2026-74366, CVE-2026-74367, CVE-2026-74368,\nCVE-2026-74370, CVE-2026-74371, CVE-2026-74372, CVE-2026-74373,\nCVE-2026-74374, CVE-2026-74375, CVE-2026-74376, CVE-2026-74377,\nCVE-2026-74378, CVE-2026-74379, CVE-2026-74380, CVE-2026-74381,\nCVE-2026-74382, CVE-2026-74383, CVE-2026-74384, CVE-2026-74385,\nCVE-2026-74386, CVE-2026-74387, CVE-2026-74388, CVE-2026-74389,\nCVE-2026-74390, CVE-2026-74391, CVE-2026-74392, CVE-2026-74393,\nCVE-2026-74394, CVE-2026-74395, CVE-2026-74396, CVE-2026-74397,\nCVE-2026-74398, CVE-2026-74399, CVE-2026-74400, CVE-2026-74401,\nCVE-2026-74402, CVE-2026-74403, CVE-2026-74404, CVE-2026-74405,\nCVE-2026-74406, CVE-2026-74407, CVE-2026-74408, CVE-2026-74409,\nCVE-2026-74410, CVE-2026-74411, CVE-2026-74412, CVE-2026-74413,\nCVE-2026-74415, CVE-2026-74416, CVE-2026-74417, CVE-2026-74419,\nCVE-2026-74420, CVE-2026-74421, CVE-2026-74422, CVE-2026-74423,\nCVE-2026-74424, CVE-2026-74425, CVE-2026-74426, CVE-2026-74427,\nCVE-2026-74428, CVE-2026-74429, CVE-2026-74430, CVE-2026-74431,\nCVE-2026-74432, CVE-2026-74433, CVE-2026-74434, CVE-2026-74435,\nCVE-2026-74436, CVE-2026-74437, CVE-2026-74438, CVE-2026-74439,\nCVE-2026-80592, CVE-2026-80593, CVE-2026-80594, CVE-2026-80595,\nCVE-2026-80596, CVE-2026-80597, CVE-2026-80598, CVE-2026-80599,\nCVE-2026-80600, CVE-2026-80601, CVE-2026-80602, CVE-2026-80603,\nCVE-2026-80604, CVE-2026-80605, CVE-2026-80606, CVE-2026-80607,\nCVE-2026-80609, CVE-2026-80610, CVE-2026-80611, CVE-2026-80612,\nCVE-2026-80613, CVE-2026-80614, CVE-2026-80615, CVE-2026-80616,\nCVE-2026-80617, CVE-2026-80618, CVE-2026-80619, CVE-2026-80620,\nCVE-2026-80621, CVE-2026-80622, CVE-2026-80623, CVE-2026-80624,\nCVE-2026-80625, CVE-2026-80626, CVE-2026-80627, CVE-2026-80628,\nCVE-2026-80629, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634,\nCVE-2026-80635, CVE-2026-80636, CVE-2026-80637, CVE-2026-80638,\nCVE-2026-80639, CVE-2026-80640, CVE-2026-80641, CVE-2026-80642,\nCVE-2026-80643, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646,\nCVE-2026-80647, CVE-2026-80648, CVE-2026-80649, CVE-2026-80650,\nCVE-2026-80651, CVE-2026-80652, CVE-2026-80653, CVE-2026-80654,\nCVE-2026-80655, CVE-2026-80657, CVE-2026-80658, CVE-2026-80659,\nCVE-2026-80660, CVE-2026-80661, CVE-2026-80662, CVE-2026-80663,\nCVE-2026-80664, CVE-2026-80665, CVE-2026-80666, CVE-2026-80667,\nCVE-2026-80668, CVE-2026-80669, CVE-2026-80670, CVE-2026-80671,\nCVE-2026-80675, CVE-2026-80676, CVE-2026-80677, CVE-2026-80865,\nCVE-2026-80866, CVE-2026-80867, CVE-2026-80868, CVE-2026-80870,\nCVE-2026-80871, CVE-2026-80872, CVE-2026-80873, CVE-2026-80874,\nCVE-2026-80875, CVE-2026-80876, CVE-2026-80877, CVE-2026-80878,\nCVE-2026-80879, CVE-2026-80880, CVE-2026-80881, CVE-2026-80882,\nCVE-2026-80883, CVE-2026-80884, CVE-2026-80885, CVE-2026-80886,\nCVE-2026-89774, CVE-2026-92502)\n","status":"published","published":"2026-10-06T15:45:44Z","modified":"2026-11-09T12:47:23.989850383Z","updated_at":"2026-11-09T12:55:09.79476Z"},{"id":"USN-8888-2","title":"linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIB drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - MediaTek PM domains;\n  - Power supply drivers;\n  - PTP clock framework;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - Reset controller framework;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SoundWire subsystem;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB DSL drivers;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Overlay file system;\n  - Proc file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - File system encryption (fscrypt);\n  - MAC80211 subsystem;\n  - IPv4 networking;\n  - Live Update Orchestrator (LUO);\n  - Mellanox drivers;\n  - Networking core;\n  - Sun RPC protocol;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IP tunnels definitions;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - User-space API (UAPI);\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kexec HandOver (KHO);\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Codetag library;\n  - Resizable hashtable library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - AMD SoC Alsa drivers;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - QCOM ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2026-64349, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533,\nCVE-2026-64534, CVE-2026-64535, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64539, CVE-2026-64540, CVE-2026-64541, CVE-2026-64542,\nCVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,\nCVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,\nCVE-2026-64551, CVE-2026-64552, CVE-2026-64553, CVE-2026-64554,\nCVE-2026-64555, CVE-2026-64557, CVE-2026-64558, CVE-2026-64559,\nCVE-2026-64560, CVE-2026-64561, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64566, CVE-2026-64567,\nCVE-2026-64568, CVE-2026-64569, CVE-2026-64570, CVE-2026-64571,\nCVE-2026-64572, CVE-2026-64573, CVE-2026-64574, CVE-2026-64575,\nCVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64579,\nCVE-2026-64580, CVE-2026-64581, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64585, CVE-2026-64586, CVE-2026-68081,\nCVE-2026-68082, CVE-2026-68083, CVE-2026-68093, CVE-2026-68095,\nCVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68099,\nCVE-2026-68100, CVE-2026-68104, CVE-2026-68105, CVE-2026-68106,\nCVE-2026-68107, CVE-2026-68108, CVE-2026-68109, CVE-2026-68110,\nCVE-2026-68111, CVE-2026-68112, CVE-2026-68113, CVE-2026-68114,\nCVE-2026-68115, CVE-2026-68116, CVE-2026-68117, CVE-2026-68118,\nCVE-2026-68119, CVE-2026-68120, CVE-2026-68121, CVE-2026-68122,\nCVE-2026-68123, CVE-2026-68124, CVE-2026-68125, CVE-2026-68126,\nCVE-2026-68127, CVE-2026-68128, CVE-2026-68129, CVE-2026-68130,\nCVE-2026-68131, CVE-2026-68132, CVE-2026-68133, CVE-2026-68134,\nCVE-2026-68135, CVE-2026-68136, CVE-2026-68137, CVE-2026-68138,\nCVE-2026-68139, CVE-2026-68140, CVE-2026-68141, CVE-2026-68142,\nCVE-2026-68143, CVE-2026-68144, CVE-2026-68145, CVE-2026-68146,\nCVE-2026-68147, CVE-2026-68148, CVE-2026-68149, CVE-2026-68150,\nCVE-2026-68151, CVE-2026-68152, CVE-2026-68153, CVE-2026-68154,\nCVE-2026-68155, CVE-2026-68156, CVE-2026-68157, CVE-2026-68158,\nCVE-2026-68159, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162,\nCVE-2026-68163, CVE-2026-68164, CVE-2026-68165, CVE-2026-68166,\nCVE-2026-68168, CVE-2026-68169, CVE-2026-68170, CVE-2026-68172,\nCVE-2026-68173, CVE-2026-68174, CVE-2026-68175, CVE-2026-68176,\nCVE-2026-68177, CVE-2026-68178, CVE-2026-68179, CVE-2026-68180,\nCVE-2026-68181, CVE-2026-68182, CVE-2026-68183, CVE-2026-68184,\nCVE-2026-68186, CVE-2026-68187, CVE-2026-68188, CVE-2026-68189,\nCVE-2026-68190, CVE-2026-68191, CVE-2026-68192, CVE-2026-68193,\nCVE-2026-68194, CVE-2026-68195, CVE-2026-68196, CVE-2026-68197,\nCVE-2026-68198, CVE-2026-68199, CVE-2026-68200, CVE-2026-68201,\nCVE-2026-68202, CVE-2026-68203, CVE-2026-68204, CVE-2026-68205,\nCVE-2026-68206, CVE-2026-68207, CVE-2026-68208, CVE-2026-68209,\nCVE-2026-68210, CVE-2026-68211, CVE-2026-68212, CVE-2026-68213,\nCVE-2026-68214, CVE-2026-68215, CVE-2026-68216, CVE-2026-68217,\nCVE-2026-68218, CVE-2026-68219, CVE-2026-68220, CVE-2026-68221,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68224, CVE-2026-68225,\nCVE-2026-68226, CVE-2026-68227, CVE-2026-68228, CVE-2026-68229,\nCVE-2026-68230, CVE-2026-68231, CVE-2026-68232, CVE-2026-68233,\nCVE-2026-68234, CVE-2026-68235, CVE-2026-68236, CVE-2026-68237,\nCVE-2026-68238, CVE-2026-68239, CVE-2026-68240, CVE-2026-68241,\nCVE-2026-68242, CVE-2026-68243, CVE-2026-68244, CVE-2026-68245,\nCVE-2026-68246, CVE-2026-68247, CVE-2026-68248, CVE-2026-68249,\nCVE-2026-68250, CVE-2026-68251, CVE-2026-68252, CVE-2026-68253,\nCVE-2026-68254, CVE-2026-68255, CVE-2026-68256, CVE-2026-68257,\nCVE-2026-68258, CVE-2026-68259, CVE-2026-68260, CVE-2026-68261,\nCVE-2026-68262, CVE-2026-68263, CVE-2026-68264, CVE-2026-68265,\nCVE-2026-68266, CVE-2026-68267, CVE-2026-68268, CVE-2026-68269,\nCVE-2026-68270, CVE-2026-68271, CVE-2026-68272, CVE-2026-68273,\nCVE-2026-68274, CVE-2026-68275, CVE-2026-68276, CVE-2026-68277,\nCVE-2026-68278, CVE-2026-68279, CVE-2026-68280, CVE-2026-68281,\nCVE-2026-68282, CVE-2026-68283, CVE-2026-68284, CVE-2026-68286,\nCVE-2026-68287, CVE-2026-68288, CVE-2026-68289, CVE-2026-68290,\nCVE-2026-68291, CVE-2026-68292, CVE-2026-68293, CVE-2026-68294,\nCVE-2026-68296, CVE-2026-68297, CVE-2026-68298, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68302, CVE-2026-68303,\nCVE-2026-68304, CVE-2026-68306, CVE-2026-68307, CVE-2026-68308,\nCVE-2026-68309, CVE-2026-68310, CVE-2026-68311, CVE-2026-68312,\nCVE-2026-68313, CVE-2026-68314, CVE-2026-68315, CVE-2026-68316,\nCVE-2026-68317, CVE-2026-68318, CVE-2026-68319, CVE-2026-68320,\nCVE-2026-68321, CVE-2026-68322, CVE-2026-68323, CVE-2026-68324,\nCVE-2026-68325, CVE-2026-68326, CVE-2026-68327, CVE-2026-68328,\nCVE-2026-68329, CVE-2026-68330, CVE-2026-68331, CVE-2026-68332,\nCVE-2026-68333, CVE-2026-68334, CVE-2026-68335, CVE-2026-68336,\nCVE-2026-68337, CVE-2026-68338, CVE-2026-68339, CVE-2026-68340,\nCVE-2026-68341, CVE-2026-68342, CVE-2026-68343, CVE-2026-68345,\nCVE-2026-68346, CVE-2026-68347, CVE-2026-68348, CVE-2026-68349,\nCVE-2026-68350, CVE-2026-68351, CVE-2026-68352, CVE-2026-68353,\nCVE-2026-68354, CVE-2026-68355, CVE-2026-68356, CVE-2026-68357,\nCVE-2026-68358, CVE-2026-68359, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68362, CVE-2026-68363, CVE-2026-68364, CVE-2026-68365,\nCVE-2026-68366, CVE-2026-68367, CVE-2026-68368, CVE-2026-68369,\nCVE-2026-68370, CVE-2026-68371, CVE-2026-68372, CVE-2026-68373,\nCVE-2026-68374, CVE-2026-68375, CVE-2026-68376, CVE-2026-68377,\nCVE-2026-68378, CVE-2026-68379, CVE-2026-68380, CVE-2026-68381,\nCVE-2026-68382, CVE-2026-68383, CVE-2026-68384, CVE-2026-68385,\nCVE-2026-68386, CVE-2026-68387, CVE-2026-68388, CVE-2026-68389,\nCVE-2026-68390, CVE-2026-68391, CVE-2026-68392, CVE-2026-68393,\nCVE-2026-68394, CVE-2026-68395, CVE-2026-68396, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68399, CVE-2026-68400, CVE-2026-68401,\nCVE-2026-68402, CVE-2026-68403, CVE-2026-68404, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68407, CVE-2026-68408, CVE-2026-68409,\nCVE-2026-68410, CVE-2026-68411, CVE-2026-68412, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68415, CVE-2026-68416, CVE-2026-68417,\nCVE-2026-68418, CVE-2026-68419, CVE-2026-68420, CVE-2026-68421,\nCVE-2026-68422, CVE-2026-68425, CVE-2026-68426, CVE-2026-68427,\nCVE-2026-68428, CVE-2026-68429, CVE-2026-68430, CVE-2026-68431,\nCVE-2026-68432, CVE-2026-68433, CVE-2026-68434, CVE-2026-68436,\nCVE-2026-68437, CVE-2026-68439, CVE-2026-68440, CVE-2026-68441,\nCVE-2026-68442, CVE-2026-68443, CVE-2026-68444, CVE-2026-68445,\nCVE-2026-68446, CVE-2026-68447, CVE-2026-68448, CVE-2026-68449,\nCVE-2026-68450, CVE-2026-68454, CVE-2026-68455, CVE-2026-68456,\nCVE-2026-68457, CVE-2026-68458, CVE-2026-68463, CVE-2026-68464,\nCVE-2026-68465, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469,\nCVE-2026-68470, CVE-2026-68471, CVE-2026-68472, CVE-2026-68473,\nCVE-2026-68474, CVE-2026-68475, CVE-2026-68476, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72003,\nCVE-2026-72004, CVE-2026-72005, CVE-2026-72006, CVE-2026-72007,\nCVE-2026-72008, CVE-2026-72009, CVE-2026-72010, CVE-2026-72011,\nCVE-2026-72012, CVE-2026-72013, CVE-2026-72014, CVE-2026-72015,\nCVE-2026-72016, CVE-2026-72017, CVE-2026-72018, CVE-2026-72019,\nCVE-2026-72020, CVE-2026-72021, CVE-2026-72022, CVE-2026-72023,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72026, CVE-2026-72027,\nCVE-2026-72028, CVE-2026-72029, CVE-2026-72030, CVE-2026-72031,\nCVE-2026-72032, CVE-2026-72033, CVE-2026-72034, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72041, CVE-2026-72042, CVE-2026-72045,\nCVE-2026-72046, CVE-2026-72047, CVE-2026-72048, CVE-2026-72049,\nCVE-2026-72050, CVE-2026-72051, CVE-2026-72052, CVE-2026-72053,\nCVE-2026-72054, CVE-2026-72055, CVE-2026-72056, CVE-2026-72057,\nCVE-2026-72058, CVE-2026-72059, CVE-2026-72060, CVE-2026-72061,\nCVE-2026-72062, CVE-2026-72063, CVE-2026-72064, CVE-2026-72065,\nCVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72069,\nCVE-2026-72070, CVE-2026-72071, CVE-2026-72072, CVE-2026-72073,\nCVE-2026-72074, CVE-2026-72075, CVE-2026-72076, CVE-2026-72077,\nCVE-2026-72078, CVE-2026-72079, CVE-2026-72080, CVE-2026-72081,\nCVE-2026-72082, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085,\nCVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,\nCVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093,\nCVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72098,\nCVE-2026-72099, CVE-2026-72100, CVE-2026-72101, CVE-2026-72102,\nCVE-2026-72103, CVE-2026-72104, CVE-2026-72105, CVE-2026-72106,\nCVE-2026-72107, CVE-2026-72108, CVE-2026-72109, CVE-2026-72110,\nCVE-2026-72111, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72127,\nCVE-2026-72128, CVE-2026-72129, CVE-2026-72130, CVE-2026-72131,\nCVE-2026-72132, CVE-2026-72133, CVE-2026-72134, CVE-2026-72135,\nCVE-2026-72136, CVE-2026-72137, CVE-2026-72138, CVE-2026-72139,\nCVE-2026-72140, CVE-2026-72141, CVE-2026-72142, CVE-2026-72143,\nCVE-2026-72144, CVE-2026-72146, CVE-2026-72147, CVE-2026-72148,\nCVE-2026-72149, CVE-2026-72150, CVE-2026-72151, CVE-2026-72152,\nCVE-2026-72153, CVE-2026-72154, CVE-2026-72155, CVE-2026-72156,\nCVE-2026-72157, CVE-2026-72158, CVE-2026-72159, CVE-2026-72160,\nCVE-2026-72161, CVE-2026-72162, CVE-2026-72163, CVE-2026-72164,\nCVE-2026-72165, CVE-2026-72166, CVE-2026-72167, CVE-2026-72168,\nCVE-2026-72169, CVE-2026-72170, CVE-2026-72171, CVE-2026-72172,\nCVE-2026-72173, CVE-2026-72174, CVE-2026-72175, CVE-2026-72176,\nCVE-2026-72177, CVE-2026-72178, CVE-2026-72179, CVE-2026-72180,\nCVE-2026-72181, CVE-2026-72182, CVE-2026-72183, CVE-2026-72191,\nCVE-2026-72192, CVE-2026-72193, CVE-2026-72194, CVE-2026-72195,\nCVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213,\nCVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72217,\nCVE-2026-72218, CVE-2026-72219, CVE-2026-72220, CVE-2026-72221,\nCVE-2026-72222, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72226, CVE-2026-72227, CVE-2026-72228, CVE-2026-72229,\nCVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233,\nCVE-2026-72234, CVE-2026-72235, CVE-2026-72236, CVE-2026-72237,\nCVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72242,\nCVE-2026-72243, CVE-2026-72244, CVE-2026-72245, CVE-2026-72247,\nCVE-2026-72248, CVE-2026-72249, CVE-2026-72250, CVE-2026-72251,\nCVE-2026-72252, CVE-2026-72253, CVE-2026-72254, CVE-2026-72255,\nCVE-2026-72256, CVE-2026-72257, CVE-2026-72258, CVE-2026-72259,\nCVE-2026-72260, CVE-2026-72261, CVE-2026-72262, CVE-2026-72263,\nCVE-2026-72264, CVE-2026-72265, CVE-2026-72266, CVE-2026-72267,\nCVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,\nCVE-2026-72272, CVE-2026-72273, CVE-2026-72274, CVE-2026-72275,\nCVE-2026-72276, CVE-2026-72277, CVE-2026-72278, CVE-2026-72279,\nCVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284,\nCVE-2026-72285, CVE-2026-72286, CVE-2026-72287, CVE-2026-72288,\nCVE-2026-72289, CVE-2026-72290, CVE-2026-72292, CVE-2026-72293,\nCVE-2026-72296, CVE-2026-72297, CVE-2026-72298, CVE-2026-72299,\nCVE-2026-72300, CVE-2026-72301, CVE-2026-72302, CVE-2026-72303,\nCVE-2026-72304, CVE-2026-72305, CVE-2026-72306, CVE-2026-72307,\nCVE-2026-72308, CVE-2026-72310, CVE-2026-72312, CVE-2026-72313,\nCVE-2026-72314, CVE-2026-72315, CVE-2026-72316, CVE-2026-72317,\nCVE-2026-72318, CVE-2026-72319, CVE-2026-72320, CVE-2026-72321,\nCVE-2026-72322, CVE-2026-72323, CVE-2026-72324, CVE-2026-72325,\nCVE-2026-72326, CVE-2026-72327, CVE-2026-72328, CVE-2026-72329,\nCVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337,\nCVE-2026-72338, CVE-2026-72339, CVE-2026-72340, CVE-2026-72341,\nCVE-2026-72342, CVE-2026-72343, CVE-2026-72345, CVE-2026-72347,\nCVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351,\nCVE-2026-72352, CVE-2026-72355, CVE-2026-72356, CVE-2026-72357,\nCVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363,\nCVE-2026-72364, CVE-2026-72365, CVE-2026-72366, CVE-2026-72367,\nCVE-2026-72368, CVE-2026-72369, CVE-2026-72370, CVE-2026-72371,\nCVE-2026-72372, CVE-2026-72373, CVE-2026-72374, CVE-2026-72375,\nCVE-2026-72376, CVE-2026-72377, CVE-2026-72378, CVE-2026-72379,\nCVE-2026-72380, CVE-2026-72381, CVE-2026-72382, CVE-2026-72383,\nCVE-2026-72384, CVE-2026-72385, CVE-2026-72386, CVE-2026-72387,\nCVE-2026-72388, CVE-2026-72389, CVE-2026-72390, CVE-2026-72391,\nCVE-2026-72392, CVE-2026-72393, CVE-2026-72394, CVE-2026-72395,\nCVE-2026-72396, CVE-2026-72397, CVE-2026-72398, CVE-2026-72399,\nCVE-2026-72400, CVE-2026-72401, CVE-2026-72402, CVE-2026-72403,\nCVE-2026-72405, CVE-2026-72406, CVE-2026-72407, CVE-2026-72408,\nCVE-2026-72409, CVE-2026-72410, CVE-2026-72412, CVE-2026-72413,\nCVE-2026-72414, CVE-2026-72415, CVE-2026-72416, CVE-2026-72417,\nCVE-2026-72418, CVE-2026-72419, CVE-2026-72420, CVE-2026-72421,\nCVE-2026-72422, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425,\nCVE-2026-72427, CVE-2026-72428, CVE-2026-72429, CVE-2026-72430,\nCVE-2026-72431, CVE-2026-72433, CVE-2026-72434, CVE-2026-72435,\nCVE-2026-72436, CVE-2026-72437, CVE-2026-72438, CVE-2026-72439,\nCVE-2026-72440, CVE-2026-72441, CVE-2026-72442, CVE-2026-72443,\nCVE-2026-72444, CVE-2026-72445, CVE-2026-72446, CVE-2026-72447,\nCVE-2026-72448, CVE-2026-72449, CVE-2026-72450, CVE-2026-72451,\nCVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455,\nCVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72463,\nCVE-2026-72464, CVE-2026-72465, CVE-2026-72466, CVE-2026-72467,\nCVE-2026-72468, CVE-2026-72469, CVE-2026-72470, CVE-2026-72471,\nCVE-2026-72472, CVE-2026-72473, CVE-2026-72474, CVE-2026-72475,\nCVE-2026-72476, CVE-2026-72477, CVE-2026-72478, CVE-2026-72479,\nCVE-2026-72480, CVE-2026-72481, CVE-2026-72482, CVE-2026-72483,\nCVE-2026-72484, CVE-2026-72485, CVE-2026-72486, CVE-2026-72487,\nCVE-2026-72488, CVE-2026-72489, CVE-2026-72491, CVE-2026-72492,\nCVE-2026-72493, CVE-2026-72494, CVE-2026-72495, CVE-2026-72496,\nCVE-2026-72498, CVE-2026-72499, CVE-2026-72500, CVE-2026-72501,\nCVE-2026-72502, CVE-2026-74255, CVE-2026-74256, CVE-2026-74257,\nCVE-2026-74258, CVE-2026-74260, CVE-2026-74261, CVE-2026-74262,\nCVE-2026-74263, CVE-2026-74264, CVE-2026-74265, CVE-2026-74266,\nCVE-2026-74267, CVE-2026-74268, CVE-2026-74269, CVE-2026-74270,\nCVE-2026-74271, CVE-2026-74272, CVE-2026-74273, CVE-2026-74274,\nCVE-2026-74276, CVE-2026-74277, CVE-2026-74278, CVE-2026-74279,\nCVE-2026-74280, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283,\nCVE-2026-74284, CVE-2026-74286, CVE-2026-74287, CVE-2026-74288,\nCVE-2026-74289, CVE-2026-74290, CVE-2026-74291, CVE-2026-74292,\nCVE-2026-74293, CVE-2026-74294, CVE-2026-74295, CVE-2026-74296,\nCVE-2026-74297, CVE-2026-74300, CVE-2026-74301, CVE-2026-74302,\nCVE-2026-74303, CVE-2026-74304, CVE-2026-74305, CVE-2026-74306,\nCVE-2026-74307, CVE-2026-74308, CVE-2026-74309, CVE-2026-74310,\nCVE-2026-74311, CVE-2026-74312, CVE-2026-74313, CVE-2026-74314,\nCVE-2026-74316, CVE-2026-74317, CVE-2026-74318, CVE-2026-74320,\nCVE-2026-74321, CVE-2026-74322, CVE-2026-74323, CVE-2026-74324,\nCVE-2026-74325, CVE-2026-74327, CVE-2026-74328, CVE-2026-74329,\nCVE-2026-74330, CVE-2026-74331, CVE-2026-74332, CVE-2026-74333,\nCVE-2026-74334, CVE-2026-74335, CVE-2026-74336, CVE-2026-74337,\nCVE-2026-74338, CVE-2026-74339, CVE-2026-74340, CVE-2026-74341,\nCVE-2026-74344, CVE-2026-74345, CVE-2026-74346, CVE-2026-74347,\nCVE-2026-74348, CVE-2026-74349, CVE-2026-74350, CVE-2026-74351,\nCVE-2026-74352, CVE-2026-74353, CVE-2026-74354, CVE-2026-74355,\nCVE-2026-74356, CVE-2026-74358, CVE-2026-74359, CVE-2026-74360,\nCVE-2026-74361, CVE-2026-74362, CVE-2026-74363, CVE-2026-74364,\nCVE-2026-74365, CVE-2026-74366, CVE-2026-74367, CVE-2026-74368,\nCVE-2026-74370, CVE-2026-74371, CVE-2026-74372, CVE-2026-74373,\nCVE-2026-74374, CVE-2026-74375, CVE-2026-74376, CVE-2026-74377,\nCVE-2026-74378, CVE-2026-74379, CVE-2026-74380, CVE-2026-74381,\nCVE-2026-74382, CVE-2026-74383, CVE-2026-74384, CVE-2026-74385,\nCVE-2026-74386, CVE-2026-74387, CVE-2026-74388, CVE-2026-74389,\nCVE-2026-74390, CVE-2026-74391, CVE-2026-74392, CVE-2026-74393,\nCVE-2026-74394, CVE-2026-74395, CVE-2026-74396, CVE-2026-74397,\nCVE-2026-74398, CVE-2026-74399, CVE-2026-74400, CVE-2026-74401,\nCVE-2026-74402, CVE-2026-74403, CVE-2026-74404, CVE-2026-74405,\nCVE-2026-74406, CVE-2026-74407, CVE-2026-74408, CVE-2026-74409,\nCVE-2026-74410, CVE-2026-74411, CVE-2026-74412, CVE-2026-74413,\nCVE-2026-74415, CVE-2026-74416, CVE-2026-74417, CVE-2026-74419,\nCVE-2026-74420, CVE-2026-74421, CVE-2026-74422, CVE-2026-74423,\nCVE-2026-74424, CVE-2026-74425, CVE-2026-74426, CVE-2026-74427,\nCVE-2026-74428, CVE-2026-74429, CVE-2026-74430, CVE-2026-74431,\nCVE-2026-74432, CVE-2026-74433, CVE-2026-74434, CVE-2026-74435,\nCVE-2026-74436, CVE-2026-74437, CVE-2026-74438, CVE-2026-74439,\nCVE-2026-80592, CVE-2026-80593, CVE-2026-80594, CVE-2026-80595,\nCVE-2026-80596, CVE-2026-80597, CVE-2026-80598, CVE-2026-80599,\nCVE-2026-80600, CVE-2026-80601, CVE-2026-80602, CVE-2026-80603,\nCVE-2026-80604, CVE-2026-80605, CVE-2026-80606, CVE-2026-80607,\nCVE-2026-80609, CVE-2026-80610, CVE-2026-80611, CVE-2026-80612,\nCVE-2026-80613, CVE-2026-80614, CVE-2026-80615, CVE-2026-80616,\nCVE-2026-80617, CVE-2026-80618, CVE-2026-80619, CVE-2026-80620,\nCVE-2026-80621, CVE-2026-80622, CVE-2026-80623, CVE-2026-80624,\nCVE-2026-80625, CVE-2026-80626, CVE-2026-80627, CVE-2026-80628,\nCVE-2026-80629, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634,\nCVE-2026-80635, CVE-2026-80636, CVE-2026-80637, CVE-2026-80638,\nCVE-2026-80639, CVE-2026-80640, CVE-2026-80641, CVE-2026-80642,\nCVE-2026-80643, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646,\nCVE-2026-80647, CVE-2026-80648, CVE-2026-80649, CVE-2026-80650,\nCVE-2026-80651, CVE-2026-80652, CVE-2026-80653, CVE-2026-80654,\nCVE-2026-80655, CVE-2026-80657, CVE-2026-80658, CVE-2026-80659,\nCVE-2026-80660, CVE-2026-80661, CVE-2026-80662, CVE-2026-80663,\nCVE-2026-80664, CVE-2026-80665, CVE-2026-80666, CVE-2026-80667,\nCVE-2026-80668, CVE-2026-80669, CVE-2026-80670, CVE-2026-80671,\nCVE-2026-80675, CVE-2026-80676, CVE-2026-80677, CVE-2026-80865,\nCVE-2026-80866, CVE-2026-80867, CVE-2026-80868, CVE-2026-80870,\nCVE-2026-80871, CVE-2026-80872, CVE-2026-80873, CVE-2026-80874,\nCVE-2026-80875, CVE-2026-80876, CVE-2026-80877, CVE-2026-80878,\nCVE-2026-80879, CVE-2026-80880, CVE-2026-80881, CVE-2026-80882,\nCVE-2026-80883, CVE-2026-80884, CVE-2026-80885, CVE-2026-80886,\nCVE-2026-89774, CVE-2026-92502)\n","status":"published","published":"2026-10-08T12:50:59Z","modified":"2026-11-09T12:50:04.437605702Z","updated_at":"2026-11-09T13:27:33.428057Z"},{"id":"USN-8889-1","title":"linux-oem-7.0 vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIB drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - MediaTek PM domains;\n  - Power supply drivers;\n  - PTP clock framework;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - Reset controller framework;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SoundWire subsystem;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB DSL drivers;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Proc file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - File system encryption (fscrypt);\n  - MAC80211 subsystem;\n  - Live Update Orchestrator (LUO);\n  - Mellanox drivers;\n  - Networking core;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IPv4 networking;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - User-space API (UAPI);\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kexec HandOver (KHO);\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Codetag library;\n  - Resizable hashtable library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - TLS protocol;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - AMD SoC Alsa drivers;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - QCOM ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2026-64349, CVE-2026-64532, CVE-2026-64533, CVE-2026-64537,\nCVE-2026-64538, CVE-2026-64539, CVE-2026-64540, CVE-2026-64542,\nCVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,\nCVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,\nCVE-2026-64552, CVE-2026-64553, CVE-2026-64554, CVE-2026-64555,\nCVE-2026-64557, CVE-2026-64558, CVE-2026-64559, CVE-2026-64560,\nCVE-2026-64561, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564,\nCVE-2026-64565, CVE-2026-64566, CVE-2026-64567, CVE-2026-64568,\nCVE-2026-64569, CVE-2026-64570, CVE-2026-64571, CVE-2026-64572,\nCVE-2026-64573, CVE-2026-64574, CVE-2026-64575, CVE-2026-64576,\nCVE-2026-64577, CVE-2026-64578, CVE-2026-64579, CVE-2026-64580,\nCVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64585, CVE-2026-64586, CVE-2026-68081, CVE-2026-68082,\nCVE-2026-68093, CVE-2026-68095, CVE-2026-68096, CVE-2026-68097,\nCVE-2026-68098, CVE-2026-68099, CVE-2026-68100, CVE-2026-68104,\nCVE-2026-68105, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68109, CVE-2026-68110, CVE-2026-68111, CVE-2026-68112,\nCVE-2026-68113, CVE-2026-68114, CVE-2026-68115, CVE-2026-68116,\nCVE-2026-68117, CVE-2026-68118, CVE-2026-68119, CVE-2026-68120,\nCVE-2026-68121, CVE-2026-68122, CVE-2026-68123, CVE-2026-68124,\nCVE-2026-68125, CVE-2026-68126, CVE-2026-68127, CVE-2026-68128,\nCVE-2026-68129, CVE-2026-68130, CVE-2026-68131, CVE-2026-68132,\nCVE-2026-68133, CVE-2026-68134, CVE-2026-68135, CVE-2026-68136,\nCVE-2026-68137, CVE-2026-68138, CVE-2026-68139, CVE-2026-68140,\nCVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144,\nCVE-2026-68145, CVE-2026-68146, CVE-2026-68147, CVE-2026-68148,\nCVE-2026-68149, CVE-2026-68150, CVE-2026-68151, CVE-2026-68152,\nCVE-2026-68153, CVE-2026-68154, CVE-2026-68155, CVE-2026-68156,\nCVE-2026-68157, CVE-2026-68158, CVE-2026-68159, CVE-2026-68160,\nCVE-2026-68161, CVE-2026-68162, CVE-2026-68163, CVE-2026-68164,\nCVE-2026-68165, CVE-2026-68166, CVE-2026-68168, CVE-2026-68169,\nCVE-2026-68170, CVE-2026-68172, CVE-2026-68173, CVE-2026-68174,\nCVE-2026-68175, CVE-2026-68176, CVE-2026-68177, CVE-2026-68178,\nCVE-2026-68179, CVE-2026-68180, CVE-2026-68181, CVE-2026-68182,\nCVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187,\nCVE-2026-68188, CVE-2026-68189, CVE-2026-68190, CVE-2026-68191,\nCVE-2026-68192, CVE-2026-68193, CVE-2026-68194, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68198, CVE-2026-68199,\nCVE-2026-68200, CVE-2026-68201, CVE-2026-68202, CVE-2026-68203,\nCVE-2026-68204, CVE-2026-68205, CVE-2026-68206, CVE-2026-68207,\nCVE-2026-68208, CVE-2026-68209, CVE-2026-68210, CVE-2026-68211,\nCVE-2026-68212, CVE-2026-68213, CVE-2026-68214, CVE-2026-68215,\nCVE-2026-68216, CVE-2026-68217, CVE-2026-68218, CVE-2026-68219,\nCVE-2026-68220, CVE-2026-68221, CVE-2026-68222, CVE-2026-68223,\nCVE-2026-68224, CVE-2026-68225, CVE-2026-68226, CVE-2026-68227,\nCVE-2026-68228, CVE-2026-68229, CVE-2026-68230, CVE-2026-68231,\nCVE-2026-68232, CVE-2026-68233, CVE-2026-68234, CVE-2026-68235,\nCVE-2026-68236, CVE-2026-68237, CVE-2026-68238, CVE-2026-68239,\nCVE-2026-68240, CVE-2026-68241, CVE-2026-68242, CVE-2026-68243,\nCVE-2026-68244, CVE-2026-68245, CVE-2026-68246, CVE-2026-68247,\nCVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68251,\nCVE-2026-68252, CVE-2026-68253, CVE-2026-68254, CVE-2026-68255,\nCVE-2026-68256, CVE-2026-68257, CVE-2026-68258, CVE-2026-68259,\nCVE-2026-68260, CVE-2026-68261, CVE-2026-68262, CVE-2026-68263,\nCVE-2026-68264, CVE-2026-68265, CVE-2026-68266, CVE-2026-68267,\nCVE-2026-68268, CVE-2026-68269, CVE-2026-68270, CVE-2026-68271,\nCVE-2026-68272, CVE-2026-68273, CVE-2026-68274, CVE-2026-68275,\nCVE-2026-68276, CVE-2026-68277, CVE-2026-68278, CVE-2026-68279,\nCVE-2026-68280, CVE-2026-68281, CVE-2026-68282, CVE-2026-68283,\nCVE-2026-68284, CVE-2026-68286, CVE-2026-68287, CVE-2026-68288,\nCVE-2026-68289, CVE-2026-68290, CVE-2026-68291, CVE-2026-68292,\nCVE-2026-68293, CVE-2026-68294, CVE-2026-68296, CVE-2026-68297,\nCVE-2026-68298, CVE-2026-68299, CVE-2026-68300, CVE-2026-68301,\nCVE-2026-68302, CVE-2026-68303, CVE-2026-68304, CVE-2026-68306,\nCVE-2026-68307, CVE-2026-68308, CVE-2026-68309, CVE-2026-68310,\nCVE-2026-68311, CVE-2026-68312, CVE-2026-68313, CVE-2026-68314,\nCVE-2026-68315, CVE-2026-68316, CVE-2026-68317, CVE-2026-68318,\nCVE-2026-68319, CVE-2026-68320, CVE-2026-68321, CVE-2026-68322,\nCVE-2026-68323, CVE-2026-68324, CVE-2026-68325, CVE-2026-68326,\nCVE-2026-68327, CVE-2026-68328, CVE-2026-68329, CVE-2026-68330,\nCVE-2026-68331, CVE-2026-68332, CVE-2026-68333, CVE-2026-68334,\nCVE-2026-68335, CVE-2026-68336, CVE-2026-68337, CVE-2026-68338,\nCVE-2026-68339, CVE-2026-68340, CVE-2026-68341, CVE-2026-68342,\nCVE-2026-68343, CVE-2026-68345, CVE-2026-68346, CVE-2026-68347,\nCVE-2026-68348, CVE-2026-68349, CVE-2026-68350, CVE-2026-68351,\nCVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68355,\nCVE-2026-68356, CVE-2026-68357, CVE-2026-68358, CVE-2026-68359,\nCVE-2026-68360, CVE-2026-68361, CVE-2026-68362, CVE-2026-68363,\nCVE-2026-68364, CVE-2026-68365, CVE-2026-68366, CVE-2026-68367,\nCVE-2026-68368, CVE-2026-68369, CVE-2026-68370, CVE-2026-68371,\nCVE-2026-68373, CVE-2026-68374, CVE-2026-68375, CVE-2026-68376,\nCVE-2026-68377, CVE-2026-68378, CVE-2026-68379, CVE-2026-68380,\nCVE-2026-68381, CVE-2026-68382, CVE-2026-68383, CVE-2026-68384,\nCVE-2026-68385, CVE-2026-68386, CVE-2026-68387, CVE-2026-68388,\nCVE-2026-68389, CVE-2026-68390, CVE-2026-68391, CVE-2026-68392,\nCVE-2026-68393, CVE-2026-68394, CVE-2026-68395, CVE-2026-68396,\nCVE-2026-68397, CVE-2026-68398, CVE-2026-68399, CVE-2026-68400,\nCVE-2026-68401, CVE-2026-68402, CVE-2026-68403, CVE-2026-68404,\nCVE-2026-68405, CVE-2026-68406, CVE-2026-68407, CVE-2026-68408,\nCVE-2026-68409, CVE-2026-68410, CVE-2026-68411, CVE-2026-68412,\nCVE-2026-68413, CVE-2026-68414, CVE-2026-68415, CVE-2026-68416,\nCVE-2026-68417, CVE-2026-68418, CVE-2026-68419, CVE-2026-68420,\nCVE-2026-68421, CVE-2026-68422, CVE-2026-68425, CVE-2026-68426,\nCVE-2026-68427, CVE-2026-68428, CVE-2026-68429, CVE-2026-68430,\nCVE-2026-68431, CVE-2026-68432, CVE-2026-68433, CVE-2026-68434,\nCVE-2026-68436, CVE-2026-68437, CVE-2026-68439, CVE-2026-68440,\nCVE-2026-68441, CVE-2026-68442, CVE-2026-68443, CVE-2026-68444,\nCVE-2026-68445, CVE-2026-68446, CVE-2026-68447, CVE-2026-68448,\nCVE-2026-68449, CVE-2026-68450, CVE-2026-68454, CVE-2026-68455,\nCVE-2026-68456, CVE-2026-68458, CVE-2026-68463, CVE-2026-68464,\nCVE-2026-68465, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469,\nCVE-2026-68470, CVE-2026-68471, CVE-2026-68472, CVE-2026-68473,\nCVE-2026-68474, CVE-2026-68475, CVE-2026-68478, CVE-2026-68479,\nCVE-2026-68480, CVE-2026-72003, CVE-2026-72004, CVE-2026-72005,\nCVE-2026-72006, CVE-2026-72007, CVE-2026-72008, CVE-2026-72009,\nCVE-2026-72010, CVE-2026-72011, CVE-2026-72012, CVE-2026-72013,\nCVE-2026-72015, CVE-2026-72016, CVE-2026-72017, CVE-2026-72018,\nCVE-2026-72019, CVE-2026-72021, CVE-2026-72022, CVE-2026-72023,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72026, CVE-2026-72027,\nCVE-2026-72028, CVE-2026-72029, CVE-2026-72030, CVE-2026-72031,\nCVE-2026-72032, CVE-2026-72034, CVE-2026-72035, CVE-2026-72036,\nCVE-2026-72037, CVE-2026-72038, CVE-2026-72039, CVE-2026-72040,\nCVE-2026-72042, CVE-2026-72045, CVE-2026-72047, CVE-2026-72048,\nCVE-2026-72049, CVE-2026-72050, CVE-2026-72051, CVE-2026-72052,\nCVE-2026-72053, CVE-2026-72054, CVE-2026-72055, CVE-2026-72056,\nCVE-2026-72057, CVE-2026-72058, CVE-2026-72059, CVE-2026-72060,\nCVE-2026-72061, CVE-2026-72062, CVE-2026-72063, CVE-2026-72066,\nCVE-2026-72067, CVE-2026-72068, CVE-2026-72070, CVE-2026-72071,\nCVE-2026-72072, CVE-2026-72073, CVE-2026-72074, CVE-2026-72075,\nCVE-2026-72076, CVE-2026-72077, CVE-2026-72078, CVE-2026-72079,\nCVE-2026-72080, CVE-2026-72081, CVE-2026-72082, CVE-2026-72086,\nCVE-2026-72087, CVE-2026-72088, CVE-2026-72089, CVE-2026-72090,\nCVE-2026-72091, CVE-2026-72092, CVE-2026-72093, CVE-2026-72095,\nCVE-2026-72096, CVE-2026-72097, CVE-2026-72099, CVE-2026-72100,\nCVE-2026-72101, CVE-2026-72102, CVE-2026-72103, CVE-2026-72104,\nCVE-2026-72105, CVE-2026-72106, CVE-2026-72107, CVE-2026-72108,\nCVE-2026-72109, CVE-2026-72110, CVE-2026-72111, CVE-2026-72113,\nCVE-2026-72114, CVE-2026-72115, CVE-2026-72116, CVE-2026-72117,\nCVE-2026-72118, CVE-2026-72119, CVE-2026-72120, CVE-2026-72121,\nCVE-2026-72122, CVE-2026-72123, CVE-2026-72124, CVE-2026-72125,\nCVE-2026-72126, CVE-2026-72127, CVE-2026-72128, CVE-2026-72131,\nCVE-2026-72132, CVE-2026-72133, CVE-2026-72134, CVE-2026-72135,\nCVE-2026-72136, CVE-2026-72138, CVE-2026-72140, CVE-2026-72141,\nCVE-2026-72142, CVE-2026-72143, CVE-2026-72144, CVE-2026-72146,\nCVE-2026-72147, CVE-2026-72148, CVE-2026-72149, CVE-2026-72150,\nCVE-2026-72151, CVE-2026-72152, CVE-2026-72153, CVE-2026-72154,\nCVE-2026-72155, CVE-2026-72156, CVE-2026-72157, CVE-2026-72158,\nCVE-2026-72159, CVE-2026-72160, CVE-2026-72161, CVE-2026-72162,\nCVE-2026-72163, CVE-2026-72164, CVE-2026-72165, CVE-2026-72166,\nCVE-2026-72167, CVE-2026-72168, CVE-2026-72169, CVE-2026-72170,\nCVE-2026-72171, CVE-2026-72172, CVE-2026-72173, CVE-2026-72174,\nCVE-2026-72175, CVE-2026-72176, CVE-2026-72177, CVE-2026-72178,\nCVE-2026-72179, CVE-2026-72180, CVE-2026-72181, CVE-2026-72182,\nCVE-2026-72183, CVE-2026-72193, CVE-2026-72195, CVE-2026-72196,\nCVE-2026-72197, CVE-2026-72212, CVE-2026-72213, CVE-2026-72214,\nCVE-2026-72215, CVE-2026-72216, CVE-2026-72218, CVE-2026-72219,\nCVE-2026-72223, CVE-2026-72224, CVE-2026-72225, CVE-2026-72227,\nCVE-2026-72228, CVE-2026-72229, CVE-2026-72230, CVE-2026-72231,\nCVE-2026-72232, CVE-2026-72233, CVE-2026-72235, CVE-2026-72236,\nCVE-2026-72237, CVE-2026-72238, CVE-2026-72240, CVE-2026-72241,\nCVE-2026-72242, CVE-2026-72243, CVE-2026-72244, CVE-2026-72245,\nCVE-2026-72247, CVE-2026-72250, CVE-2026-72252, CVE-2026-72253,\nCVE-2026-72254, CVE-2026-72255, CVE-2026-72256, CVE-2026-72257,\nCVE-2026-72258, CVE-2026-72259, CVE-2026-72260, CVE-2026-72261,\nCVE-2026-72262, CVE-2026-72263, CVE-2026-72264, CVE-2026-72265,\nCVE-2026-72266, CVE-2026-72267, CVE-2026-72268, CVE-2026-72269,\nCVE-2026-72270, CVE-2026-72271, CVE-2026-72272, CVE-2026-72273,\nCVE-2026-72274, CVE-2026-72275, CVE-2026-72276, CVE-2026-72280,\nCVE-2026-72282, CVE-2026-72283, CVE-2026-72284, CVE-2026-72285,\nCVE-2026-72286, CVE-2026-72290, CVE-2026-72292, CVE-2026-72293,\nCVE-2026-72297, CVE-2026-72298, CVE-2026-72300, CVE-2026-72301,\nCVE-2026-72302, CVE-2026-72303, CVE-2026-72304, CVE-2026-72305,\nCVE-2026-72306, CVE-2026-72307, CVE-2026-72308, CVE-2026-72310,\nCVE-2026-72312, CVE-2026-72313, CVE-2026-72314, CVE-2026-72315,\nCVE-2026-72316, CVE-2026-72321, CVE-2026-72324, CVE-2026-72325,\nCVE-2026-72326, CVE-2026-72327, CVE-2026-72328, CVE-2026-72330,\nCVE-2026-72331, CVE-2026-72332, CVE-2026-72333, CVE-2026-72334,\nCVE-2026-72335, CVE-2026-72336, CVE-2026-72337, CVE-2026-72338,\nCVE-2026-72340, CVE-2026-72341, CVE-2026-72342, CVE-2026-72343,\nCVE-2026-72345, CVE-2026-72347, CVE-2026-72349, CVE-2026-72350,\nCVE-2026-72352, CVE-2026-72356, CVE-2026-72357, CVE-2026-72360,\nCVE-2026-72361, CVE-2026-72362, CVE-2026-72363, CVE-2026-72364,\nCVE-2026-72365, CVE-2026-72367, CVE-2026-72368, CVE-2026-72369,\nCVE-2026-72370, CVE-2026-72371, CVE-2026-72372, CVE-2026-72373,\nCVE-2026-72374, CVE-2026-72375, CVE-2026-72376, CVE-2026-72377,\nCVE-2026-72378, CVE-2026-72379, CVE-2026-72380, CVE-2026-72382,\nCVE-2026-72383, CVE-2026-72384, CVE-2026-72385, CVE-2026-72386,\nCVE-2026-72387, CVE-2026-72388, CVE-2026-72389, CVE-2026-72390,\nCVE-2026-72391, CVE-2026-72392, CVE-2026-72394, CVE-2026-72395,\nCVE-2026-72396, CVE-2026-72397, CVE-2026-72400, CVE-2026-72401,\nCVE-2026-72402, CVE-2026-72403, CVE-2026-72405, CVE-2026-72406,\nCVE-2026-72407, CVE-2026-72408, CVE-2026-72409, CVE-2026-72410,\nCVE-2026-72413, CVE-2026-72414, CVE-2026-72415, CVE-2026-72416,\nCVE-2026-72418, CVE-2026-72419, CVE-2026-72420, CVE-2026-72421,\nCVE-2026-72423, CVE-2026-72424, CVE-2026-72425, CVE-2026-72427,\nCVE-2026-72428, CVE-2026-72430, CVE-2026-72431, CVE-2026-72433,\nCVE-2026-72434, CVE-2026-72435, CVE-2026-72437, CVE-2026-72438,\nCVE-2026-72439, CVE-2026-72440, CVE-2026-72441, CVE-2026-72443,\nCVE-2026-72444, CVE-2026-72445, CVE-2026-72446, CVE-2026-72447,\nCVE-2026-72448, CVE-2026-72449, CVE-2026-72450, CVE-2026-72452,\nCVE-2026-72453, CVE-2026-72454, CVE-2026-72455, CVE-2026-72456,\nCVE-2026-72457, CVE-2026-72458, CVE-2026-72459, CVE-2026-72460,\nCVE-2026-72461, CVE-2026-72462, CVE-2026-72464, CVE-2026-72465,\nCVE-2026-72467, CVE-2026-72468, CVE-2026-72469, CVE-2026-72470,\nCVE-2026-72471, CVE-2026-72474, CVE-2026-72475, CVE-2026-72476,\nCVE-2026-72478, CVE-2026-72479, CVE-2026-72480, CVE-2026-72481,\nCVE-2026-72482, CVE-2026-72483, CVE-2026-72484, CVE-2026-72485,\nCVE-2026-72486, CVE-2026-72487, CVE-2026-72488, CVE-2026-72489,\nCVE-2026-72492, CVE-2026-72498, CVE-2026-72499, CVE-2026-72500,\nCVE-2026-72502, CVE-2026-74256, CVE-2026-74257, CVE-2026-74258,\nCVE-2026-74260, CVE-2026-74261, CVE-2026-74262, CVE-2026-74263,\nCVE-2026-74264, CVE-2026-74265, CVE-2026-74266, CVE-2026-74270,\nCVE-2026-74271, CVE-2026-74272, CVE-2026-74273, CVE-2026-74274,\nCVE-2026-74276, CVE-2026-74277, CVE-2026-74278, CVE-2026-74279,\nCVE-2026-74280, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283,\nCVE-2026-74284, CVE-2026-74286, CVE-2026-74288, CVE-2026-74289,\nCVE-2026-74290, CVE-2026-74291, CVE-2026-74292, CVE-2026-74293,\nCVE-2026-74294, CVE-2026-74295, CVE-2026-74296, CVE-2026-74297,\nCVE-2026-74300, CVE-2026-74301, CVE-2026-74302, CVE-2026-74303,\nCVE-2026-74304, CVE-2026-74305, CVE-2026-74306, CVE-2026-74307,\nCVE-2026-74308, CVE-2026-74309, CVE-2026-74311, CVE-2026-74312,\nCVE-2026-74313, CVE-2026-74314, CVE-2026-74316, CVE-2026-74317,\nCVE-2026-74318, CVE-2026-74320, CVE-2026-74321, CVE-2026-74322,\nCVE-2026-74323, CVE-2026-74324, CVE-2026-74325, CVE-2026-74327,\nCVE-2026-74328, CVE-2026-74329, CVE-2026-74330, CVE-2026-74331,\nCVE-2026-74332, CVE-2026-74333, CVE-2026-74334, CVE-2026-74335,\nCVE-2026-74336, CVE-2026-74337, CVE-2026-74338, CVE-2026-74339,\nCVE-2026-74340, CVE-2026-74341, CVE-2026-74344, CVE-2026-74346,\nCVE-2026-74347, CVE-2026-74348, CVE-2026-74349, CVE-2026-74351,\nCVE-2026-74352, CVE-2026-74353, CVE-2026-74354, CVE-2026-74355,\nCVE-2026-74356, CVE-2026-74358, CVE-2026-74359, CVE-2026-74360,\nCVE-2026-74362, CVE-2026-74363, CVE-2026-74364, CVE-2026-74365,\nCVE-2026-74366, CVE-2026-74367, CVE-2026-74368, CVE-2026-74370,\nCVE-2026-74371, CVE-2026-74372, CVE-2026-74373, CVE-2026-74374,\nCVE-2026-74375, CVE-2026-74377, CVE-2026-74378, CVE-2026-74379,\nCVE-2026-74380, CVE-2026-74381, CVE-2026-74382, CVE-2026-74383,\nCVE-2026-74385, CVE-2026-74386, CVE-2026-74387, CVE-2026-74388,\nCVE-2026-74389, CVE-2026-74390, CVE-2026-74391, CVE-2026-74392,\nCVE-2026-74393, CVE-2026-74395, CVE-2026-74396, CVE-2026-74397,\nCVE-2026-74399, CVE-2026-74400, CVE-2026-74402, CVE-2026-74403,\nCVE-2026-74404, CVE-2026-74405, CVE-2026-74407, CVE-2026-74408,\nCVE-2026-74409, CVE-2026-74410, CVE-2026-74411, CVE-2026-74412,\nCVE-2026-74413, CVE-2026-74415, CVE-2026-74416, CVE-2026-74417,\nCVE-2026-74419, CVE-2026-74420, CVE-2026-74421, CVE-2026-74422,\nCVE-2026-74423, CVE-2026-74424, CVE-2026-74425, CVE-2026-74426,\nCVE-2026-74429, CVE-2026-74430, CVE-2026-74431, CVE-2026-74432,\nCVE-2026-74435, CVE-2026-74437, CVE-2026-74438, CVE-2026-80592,\nCVE-2026-80593, CVE-2026-80594, CVE-2026-80595, CVE-2026-80596,\nCVE-2026-80597, CVE-2026-80598, CVE-2026-80599, CVE-2026-80600,\nCVE-2026-80601, CVE-2026-80602, CVE-2026-80603, CVE-2026-80604,\nCVE-2026-80605, CVE-2026-80606, CVE-2026-80607, CVE-2026-80609,\nCVE-2026-80610, CVE-2026-80611, CVE-2026-80612, CVE-2026-80613,\nCVE-2026-80614, CVE-2026-80615, CVE-2026-80616, CVE-2026-80617,\nCVE-2026-80618, CVE-2026-80619, CVE-2026-80620, CVE-2026-80621,\nCVE-2026-80622, CVE-2026-80623, CVE-2026-80624, CVE-2026-80625,\nCVE-2026-80626, CVE-2026-80627, CVE-2026-80628, CVE-2026-80629,\nCVE-2026-80630, CVE-2026-80631, CVE-2026-80634, CVE-2026-80635,\nCVE-2026-80636, CVE-2026-80637, CVE-2026-80638, CVE-2026-80639,\nCVE-2026-80640, CVE-2026-80641, CVE-2026-80642, CVE-2026-80643,\nCVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,\nCVE-2026-80648, CVE-2026-80649, CVE-2026-80650, CVE-2026-80651,\nCVE-2026-80652, CVE-2026-80653, CVE-2026-80654, CVE-2026-80655,\nCVE-2026-80657, CVE-2026-80658, CVE-2026-80659, CVE-2026-80660,\nCVE-2026-80661, CVE-2026-80662, CVE-2026-80663, CVE-2026-80664,\nCVE-2026-80666, CVE-2026-80667, CVE-2026-80668, CVE-2026-80669,\nCVE-2026-80670, CVE-2026-80671, CVE-2026-80675, CVE-2026-80676,\nCVE-2026-80677, CVE-2026-80865, CVE-2026-80866, CVE-2026-80867,\nCVE-2026-80868, CVE-2026-80870, CVE-2026-80871, CVE-2026-80872,\nCVE-2026-80873, CVE-2026-80874, CVE-2026-80875, CVE-2026-80876,\nCVE-2026-80877, CVE-2026-80878, CVE-2026-80879, CVE-2026-80880,\nCVE-2026-80881, CVE-2026-80882, CVE-2026-80883, CVE-2026-80884,\nCVE-2026-80885, CVE-2026-80886, CVE-2026-89774, CVE-2026-92502)\n","status":"published","published":"2026-10-06T15:46:18Z","modified":"2026-11-09T12:49:41.294798449Z","updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"USN-8917-1","title":"linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - PCI subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - Reset controller framework;\n  - RPMSG subsystem;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - TCM subsystem;\n  - TTY drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - File system encryption (fscrypt);\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - IPv4 networking;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Socket messages infrastructure;\n  - Sun RPC protocol;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - Networking core;\n  - IP tunnels definitions;\n  - Netfilter;\n  - SCTP protocol;\n  - Network sockets;\n  - Network traffic control;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Integrity Measurement Architecture(IMA) framework;\n  - SELinux security module;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - QCOM ASoC drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n(CVE-2024-56552, CVE-2025-21687, CVE-2025-21985, CVE-2025-23131,\nCVE-2025-38069, CVE-2025-38187, CVE-2025-38563, CVE-2025-38565,\nCVE-2025-40014, CVE-2025-40098, CVE-2026-43010, CVE-2026-43216,\nCVE-2026-45897, CVE-2026-45901, CVE-2026-45944, CVE-2026-46140,\nCVE-2026-46252, CVE-2026-52909, CVE-2026-52928, CVE-2026-53005,\nCVE-2026-53027, CVE-2026-53070, CVE-2026-53078, CVE-2026-53090,\nCVE-2026-53157, CVE-2026-53163, CVE-2026-53167, CVE-2026-53226,\nCVE-2026-53325, CVE-2026-53327, CVE-2026-53361, CVE-2026-53362,\nCVE-2026-53365, CVE-2026-53366, CVE-2026-53381, CVE-2026-53382,\nCVE-2026-53383, CVE-2026-53384, CVE-2026-53385, CVE-2026-53387,\nCVE-2026-53388, CVE-2026-53389, CVE-2026-53390, CVE-2026-53391,\nCVE-2026-53392, CVE-2026-53393, CVE-2026-53397, CVE-2026-53398,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63795, CVE-2026-63796, CVE-2026-63797,\nCVE-2026-63798, CVE-2026-63800, CVE-2026-63801, CVE-2026-63802,\nCVE-2026-63803, CVE-2026-63804, CVE-2026-63806, CVE-2026-63807,\nCVE-2026-63808, CVE-2026-63809, CVE-2026-63810, CVE-2026-63812,\nCVE-2026-63814, CVE-2026-63815, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63821, CVE-2026-63822, CVE-2026-63823,\nCVE-2026-63824, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63833,\nCVE-2026-63834, CVE-2026-63835, CVE-2026-63836, CVE-2026-63940,\nCVE-2026-63970, CVE-2026-64187, CVE-2026-64188, CVE-2026-64189,\nCVE-2026-64191, CVE-2026-64192, CVE-2026-64205, CVE-2026-64206,\nCVE-2026-64241, CVE-2026-64244, CVE-2026-64245, CVE-2026-64246,\nCVE-2026-64247, CVE-2026-64249, CVE-2026-64254, CVE-2026-64256,\nCVE-2026-64266, CVE-2026-64268, CVE-2026-64269, CVE-2026-64270,\nCVE-2026-64271, CVE-2026-64272, CVE-2026-64273, CVE-2026-64274,\nCVE-2026-64275, CVE-2026-64276, CVE-2026-64277, CVE-2026-64279,\nCVE-2026-64280, CVE-2026-64286, CVE-2026-64287, CVE-2026-64289,\nCVE-2026-64294, CVE-2026-64296, CVE-2026-64297, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64301, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64305, CVE-2026-64306, CVE-2026-64312, CVE-2026-64313,\nCVE-2026-64315, CVE-2026-64316, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64319, CVE-2026-64320, CVE-2026-64321, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64326, CVE-2026-64329,\nCVE-2026-64330, CVE-2026-64331, CVE-2026-64332, CVE-2026-64333,\nCVE-2026-64334, CVE-2026-64335, CVE-2026-64336, CVE-2026-64337,\nCVE-2026-64338, CVE-2026-64340, CVE-2026-64341, CVE-2026-64342,\nCVE-2026-64343, CVE-2026-64344, CVE-2026-64345, CVE-2026-64346,\nCVE-2026-64347, CVE-2026-64348, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64355, CVE-2026-64358, CVE-2026-64359,\nCVE-2026-64360, CVE-2026-64361, CVE-2026-64362, CVE-2026-64363,\nCVE-2026-64364, CVE-2026-64365, CVE-2026-64368, CVE-2026-64369,\nCVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,\nCVE-2026-64374, CVE-2026-64375, CVE-2026-64376, CVE-2026-64377,\nCVE-2026-64378, CVE-2026-64379, CVE-2026-64380, CVE-2026-64381,\nCVE-2026-64382, CVE-2026-64383, CVE-2026-64384, CVE-2026-64385,\nCVE-2026-64386, CVE-2026-64387, CVE-2026-64390, CVE-2026-64391,\nCVE-2026-64392, CVE-2026-64393, CVE-2026-64394, CVE-2026-64395,\nCVE-2026-64396, CVE-2026-64397, CVE-2026-64398, CVE-2026-64399,\nCVE-2026-64401, CVE-2026-64402, CVE-2026-64403, CVE-2026-64404,\nCVE-2026-64405, CVE-2026-64406, CVE-2026-64407, CVE-2026-64408,\nCVE-2026-64409, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,\nCVE-2026-64417, CVE-2026-64418, CVE-2026-64419, CVE-2026-64420,\nCVE-2026-64421, CVE-2026-64422, CVE-2026-64423, CVE-2026-64424,\nCVE-2026-64425, CVE-2026-64428, CVE-2026-64429, CVE-2026-64430,\nCVE-2026-64432, CVE-2026-64433, CVE-2026-64434, CVE-2026-64435,\nCVE-2026-64436, CVE-2026-64437, CVE-2026-64438, CVE-2026-64440,\nCVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444,\nCVE-2026-64445, CVE-2026-64446, CVE-2026-64448, CVE-2026-64449,\nCVE-2026-64450, CVE-2026-64452, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64458, CVE-2026-64461, CVE-2026-64462,\nCVE-2026-64463, CVE-2026-64465, CVE-2026-64468, CVE-2026-64469,\nCVE-2026-64470, CVE-2026-64471, CVE-2026-64472, CVE-2026-64473,\nCVE-2026-64474, CVE-2026-64475, CVE-2026-64476, CVE-2026-64478,\nCVE-2026-64479, CVE-2026-64480, CVE-2026-64481, CVE-2026-64482,\nCVE-2026-64483, CVE-2026-64484, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64493, CVE-2026-64494,\nCVE-2026-64495, CVE-2026-64496, CVE-2026-64497, CVE-2026-64500,\nCVE-2026-64503, CVE-2026-64504, CVE-2026-64505, CVE-2026-64507,\nCVE-2026-64508, CVE-2026-64510, CVE-2026-64511, CVE-2026-64512,\nCVE-2026-64514, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533,\nCVE-2026-64534, CVE-2026-64535, CVE-2026-64536, CVE-2026-64537,\nCVE-2026-64538, CVE-2026-64539, CVE-2026-64540, CVE-2026-64541,\nCVE-2026-64542, CVE-2026-64543, CVE-2026-64544, CVE-2026-64545,\nCVE-2026-64546, CVE-2026-64547, CVE-2026-64548, CVE-2026-64549,\nCVE-2026-64550, CVE-2026-64551, CVE-2026-64552, CVE-2026-64553,\nCVE-2026-64554, CVE-2026-64555, CVE-2026-64556, CVE-2026-64557,\nCVE-2026-64560, CVE-2026-64561, CVE-2026-64562, CVE-2026-64564,\nCVE-2026-64565, CVE-2026-64567, CVE-2026-64568, CVE-2026-64569,\nCVE-2026-64570, CVE-2026-64571, CVE-2026-64572, CVE-2026-64573,\nCVE-2026-64574, CVE-2026-64576, CVE-2026-64577, CVE-2026-64578,\nCVE-2026-64579, CVE-2026-64580, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64585, CVE-2026-64590, CVE-2026-64593,\nCVE-2026-64594, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64602, CVE-2026-64603, CVE-2026-64604,\nCVE-2026-68083, CVE-2026-68084, CVE-2026-68085, CVE-2026-68088,\nCVE-2026-68090, CVE-2026-68091, CVE-2026-68093, CVE-2026-68096,\nCVE-2026-68097, CVE-2026-68098, CVE-2026-68099, CVE-2026-68100,\nCVE-2026-68104, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68110, CVE-2026-68111, CVE-2026-68112, CVE-2026-68115,\nCVE-2026-68116, CVE-2026-68117, CVE-2026-68119, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68124, CVE-2026-68125, CVE-2026-68126,\nCVE-2026-68127, CVE-2026-68129, CVE-2026-68130, CVE-2026-68131,\nCVE-2026-68135, CVE-2026-68136, CVE-2026-68137, CVE-2026-68139,\nCVE-2026-68140, CVE-2026-68141, CVE-2026-68142, CVE-2026-68143,\nCVE-2026-68144, CVE-2026-68145, CVE-2026-68146, CVE-2026-68147,\nCVE-2026-68148, CVE-2026-68149, CVE-2026-68151, CVE-2026-68153,\nCVE-2026-68154, CVE-2026-68155, CVE-2026-68156, CVE-2026-68157,\nCVE-2026-68158, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162,\nCVE-2026-68164, CVE-2026-68165, CVE-2026-68175, CVE-2026-68176,\nCVE-2026-68178, CVE-2026-68179, CVE-2026-68180, CVE-2026-68181,\nCVE-2026-68182, CVE-2026-68183, CVE-2026-68184, CVE-2026-68186,\nCVE-2026-68187, CVE-2026-68188, CVE-2026-68189, CVE-2026-68190,\nCVE-2026-68192, CVE-2026-68193, CVE-2026-68194, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68202,\nCVE-2026-68203, CVE-2026-68204, CVE-2026-68205, CVE-2026-68206,\nCVE-2026-68207, CVE-2026-68209, CVE-2026-68210, CVE-2026-68212,\nCVE-2026-68213, CVE-2026-68214, CVE-2026-68215, CVE-2026-68216,\nCVE-2026-68217, CVE-2026-68218, CVE-2026-68219, CVE-2026-68220,\nCVE-2026-68221, CVE-2026-68222, CVE-2026-68223, CVE-2026-68225,\nCVE-2026-68226, CVE-2026-68227, CVE-2026-68228, CVE-2026-68229,\nCVE-2026-68231, CVE-2026-68234, CVE-2026-68235, CVE-2026-68236,\nCVE-2026-68243, CVE-2026-68244, CVE-2026-68246, CVE-2026-68247,\nCVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68251,\nCVE-2026-68255, CVE-2026-68256, CVE-2026-68259, CVE-2026-68260,\nCVE-2026-68261, CVE-2026-68262, CVE-2026-68263, CVE-2026-68269,\nCVE-2026-68271, CVE-2026-68272, CVE-2026-68277, CVE-2026-68278,\nCVE-2026-68279, CVE-2026-68280, CVE-2026-68281, CVE-2026-68284,\nCVE-2026-68290, CVE-2026-68293, CVE-2026-68294, CVE-2026-68297,\nCVE-2026-68299, CVE-2026-68300, CVE-2026-68301, CVE-2026-68302,\nCVE-2026-68304, CVE-2026-68306, CVE-2026-68308, CVE-2026-68309,\nCVE-2026-68310, CVE-2026-68313, CVE-2026-68314, CVE-2026-68315,\nCVE-2026-68317, CVE-2026-68318, CVE-2026-68319, CVE-2026-68320,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68329, CVE-2026-68331, CVE-2026-68333,\nCVE-2026-68335, CVE-2026-68336, CVE-2026-68338, CVE-2026-68339,\nCVE-2026-68340, CVE-2026-68343, CVE-2026-68346, CVE-2026-68348,\nCVE-2026-68349, CVE-2026-68350, CVE-2026-68351, CVE-2026-68352,\nCVE-2026-68353, CVE-2026-68354, CVE-2026-68355, CVE-2026-68357,\nCVE-2026-68359, CVE-2026-68360, CVE-2026-68361, CVE-2026-68362,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,\nCVE-2026-68369, CVE-2026-68370, CVE-2026-68371, CVE-2026-68372,\nCVE-2026-68373, CVE-2026-68376, CVE-2026-68377, CVE-2026-68381,\nCVE-2026-68386, CVE-2026-68388, CVE-2026-68389, CVE-2026-68391,\nCVE-2026-68392, CVE-2026-68395, CVE-2026-68396, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68399, CVE-2026-68402, CVE-2026-68403,\nCVE-2026-68405, CVE-2026-68406, CVE-2026-68407, CVE-2026-68408,\nCVE-2026-68410, CVE-2026-68411, CVE-2026-68413, CVE-2026-68414,\nCVE-2026-68416, CVE-2026-68417, CVE-2026-68419, CVE-2026-68422,\nCVE-2026-68425, CVE-2026-68427, CVE-2026-68428, CVE-2026-68429,\nCVE-2026-68430, CVE-2026-68432, CVE-2026-68433, CVE-2026-68437,\nCVE-2026-68439, CVE-2026-68442, CVE-2026-68443, CVE-2026-68444,\nCVE-2026-68445, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450,\nCVE-2026-68454, CVE-2026-68456, CVE-2026-68457, CVE-2026-68459,\nCVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68476,\nCVE-2026-68477, CVE-2026-68478, CVE-2026-68479, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72007, CVE-2026-72010, CVE-2026-72012,\nCVE-2026-72013, CVE-2026-72014, CVE-2026-72015, CVE-2026-72017,\nCVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72023, CVE-2026-72024, CVE-2026-72025, CVE-2026-72028,\nCVE-2026-72029, CVE-2026-72030, CVE-2026-72033, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72041, CVE-2026-72045, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72051, CVE-2026-72052,\nCVE-2026-72053, CVE-2026-72054, CVE-2026-72055, CVE-2026-72056,\nCVE-2026-72057, CVE-2026-72058, CVE-2026-72059, CVE-2026-72061,\nCVE-2026-72062, CVE-2026-72063, CVE-2026-72065, CVE-2026-72066,\nCVE-2026-72067, CVE-2026-72068, CVE-2026-72069, CVE-2026-72070,\nCVE-2026-72071, CVE-2026-72072, CVE-2026-72074, CVE-2026-72075,\nCVE-2026-72076, CVE-2026-72077, CVE-2026-72078, CVE-2026-72079,\nCVE-2026-72081, CVE-2026-72082, CVE-2026-72083, CVE-2026-72084,\nCVE-2026-72085, CVE-2026-72086, CVE-2026-72087, CVE-2026-72088,\nCVE-2026-72089, CVE-2026-72096, CVE-2026-72097, CVE-2026-72099,\nCVE-2026-72102, CVE-2026-72105, CVE-2026-72106, CVE-2026-72107,\nCVE-2026-72108, CVE-2026-72109, CVE-2026-72110, CVE-2026-72113,\nCVE-2026-72114, CVE-2026-72115, CVE-2026-72116, CVE-2026-72117,\nCVE-2026-72118, CVE-2026-72119, CVE-2026-72120, CVE-2026-72121,\nCVE-2026-72122, CVE-2026-72123, CVE-2026-72124, CVE-2026-72125,\nCVE-2026-72126, CVE-2026-72127, CVE-2026-72129, CVE-2026-72130,\nCVE-2026-72132, CVE-2026-72133, CVE-2026-72135, CVE-2026-72136,\nCVE-2026-72138, CVE-2026-72140, CVE-2026-72142, CVE-2026-72144,\nCVE-2026-72146, CVE-2026-72147, CVE-2026-72148, CVE-2026-72149,\nCVE-2026-72152, CVE-2026-72153, CVE-2026-72155, CVE-2026-72156,\nCVE-2026-72157, CVE-2026-72158, CVE-2026-72159, CVE-2026-72160,\nCVE-2026-72161, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72168, CVE-2026-72170,\nCVE-2026-72171, CVE-2026-72172, CVE-2026-72174, CVE-2026-72175,\nCVE-2026-72176, CVE-2026-72177, CVE-2026-72179, CVE-2026-72181,\nCVE-2026-72182, CVE-2026-72191, CVE-2026-72192, CVE-2026-72193,\nCVE-2026-72194, CVE-2026-72195, CVE-2026-72196, CVE-2026-72197,\nCVE-2026-72212, CVE-2026-72213, CVE-2026-72214, CVE-2026-72215,\nCVE-2026-72216, CVE-2026-72217, CVE-2026-72218, CVE-2026-72219,\nCVE-2026-72221, CVE-2026-72222, CVE-2026-72223, CVE-2026-72224,\nCVE-2026-72225, CVE-2026-72226, CVE-2026-72227, CVE-2026-72228,\nCVE-2026-72229, CVE-2026-72230, CVE-2026-72231, CVE-2026-72232,\nCVE-2026-72233, CVE-2026-72234, CVE-2026-72235, CVE-2026-72236,\nCVE-2026-72237, CVE-2026-72238, CVE-2026-72240, CVE-2026-72241,\nCVE-2026-72242, CVE-2026-72243, CVE-2026-72244, CVE-2026-72245,\nCVE-2026-72247, CVE-2026-72250, CVE-2026-72251, CVE-2026-72252,\nCVE-2026-72253, CVE-2026-72254, CVE-2026-72255, CVE-2026-72256,\nCVE-2026-72257, CVE-2026-72258, CVE-2026-72259, CVE-2026-72260,\nCVE-2026-72261, CVE-2026-72262, CVE-2026-72264, CVE-2026-72265,\nCVE-2026-72266, CVE-2026-72267, CVE-2026-72268, CVE-2026-72269,\nCVE-2026-72270, CVE-2026-72271, CVE-2026-72272, CVE-2026-72273,\nCVE-2026-72274, CVE-2026-72275, CVE-2026-72276, CVE-2026-72282,\nCVE-2026-72284, CVE-2026-72289, CVE-2026-72290, CVE-2026-72296,\nCVE-2026-72297, CVE-2026-72298, CVE-2026-72299, CVE-2026-72300,\nCVE-2026-72301, CVE-2026-72302, CVE-2026-72304, CVE-2026-72305,\nCVE-2026-72306, CVE-2026-72307, CVE-2026-72308, CVE-2026-72310,\nCVE-2026-72312, CVE-2026-72314, CVE-2026-72316, CVE-2026-72317,\nCVE-2026-72318, CVE-2026-72319, CVE-2026-72320, CVE-2026-72322,\nCVE-2026-72323, CVE-2026-72324, CVE-2026-72325, CVE-2026-72326,\nCVE-2026-72327, CVE-2026-72330, CVE-2026-72335, CVE-2026-72336,\nCVE-2026-72338, CVE-2026-72339, CVE-2026-72340, CVE-2026-72342,\nCVE-2026-72343, CVE-2026-72347, CVE-2026-72348, CVE-2026-72349,\nCVE-2026-72350, CVE-2026-72351, CVE-2026-72352, CVE-2026-72361,\nCVE-2026-72362, CVE-2026-72369, CVE-2026-72371, CVE-2026-72373,\nCVE-2026-72374, CVE-2026-72376, CVE-2026-72378, CVE-2026-72379,\nCVE-2026-72382, CVE-2026-72384, CVE-2026-72389, CVE-2026-72390,\nCVE-2026-72391, CVE-2026-72392, CVE-2026-72395, CVE-2026-72396,\nCVE-2026-72399, CVE-2026-72400, CVE-2026-72405, CVE-2026-72406,\nCVE-2026-72409, CVE-2026-72410, CVE-2026-72414, CVE-2026-72416,\nCVE-2026-72418, CVE-2026-72419, CVE-2026-72420, CVE-2026-72421,\nCVE-2026-72422, CVE-2026-72424, CVE-2026-72425, CVE-2026-72427,\nCVE-2026-72428, CVE-2026-72430, CVE-2026-72433, CVE-2026-72434,\nCVE-2026-72435, CVE-2026-72436, CVE-2026-72437, CVE-2026-72441,\nCVE-2026-72443, CVE-2026-72444, CVE-2026-72447, CVE-2026-72448,\nCVE-2026-72449, CVE-2026-72450, CVE-2026-72451, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72464, CVE-2026-72466, CVE-2026-72467,\nCVE-2026-72469, CVE-2026-72470, CVE-2026-72473, CVE-2026-72474,\nCVE-2026-72476, CVE-2026-72478, CVE-2026-72479, CVE-2026-72480,\nCVE-2026-72481, CVE-2026-72483, CVE-2026-72484, CVE-2026-72486,\nCVE-2026-72487, CVE-2026-72489, CVE-2026-72491, CVE-2026-72492,\nCVE-2026-72502, CVE-2026-74255, CVE-2026-74256, CVE-2026-74262,\nCVE-2026-74263, CVE-2026-74265, CVE-2026-74267, CVE-2026-74270,\nCVE-2026-74271, CVE-2026-74276, CVE-2026-74278, CVE-2026-74279,\nCVE-2026-74280, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283,\nCVE-2026-74284, CVE-2026-74287, CVE-2026-74288, CVE-2026-74290,\nCVE-2026-74292, CVE-2026-74293, CVE-2026-74295, CVE-2026-74296,\nCVE-2026-74297, CVE-2026-74300, CVE-2026-74302, CVE-2026-74303,\nCVE-2026-74305, CVE-2026-74307, CVE-2026-74308, CVE-2026-74310,\nCVE-2026-74312, CVE-2026-74313, CVE-2026-74318, CVE-2026-74320,\nCVE-2026-74321, CVE-2026-74327, CVE-2026-74329, CVE-2026-74330,\nCVE-2026-74331, CVE-2026-74339, CVE-2026-74340, CVE-2026-74341,\nCVE-2026-74345, CVE-2026-74346, CVE-2026-74348, CVE-2026-74349,\nCVE-2026-74351, CVE-2026-74356, CVE-2026-74359, CVE-2026-74362,\nCVE-2026-74363, CVE-2026-74365, CVE-2026-74376, CVE-2026-74377,\nCVE-2026-74378, CVE-2026-74379, CVE-2026-74380, CVE-2026-74381,\nCVE-2026-74382, CVE-2026-74384, CVE-2026-74386, CVE-2026-74387,\nCVE-2026-74389, CVE-2026-74390, CVE-2026-74391, CVE-2026-74394,\nCVE-2026-74395, CVE-2026-74397, CVE-2026-74398, CVE-2026-74399,\nCVE-2026-74401, CVE-2026-74402, CVE-2026-74406, CVE-2026-74408,\nCVE-2026-74410, CVE-2026-74411, CVE-2026-74416, CVE-2026-74417,\nCVE-2026-74424, CVE-2026-74426, CVE-2026-74427, CVE-2026-74432,\nCVE-2026-74435, CVE-2026-74436, CVE-2026-74438, CVE-2026-74439,\nCVE-2026-74584, CVE-2026-80591, CVE-2026-80593, CVE-2026-80594,\nCVE-2026-80595, CVE-2026-80597, CVE-2026-80598, CVE-2026-80599,\nCVE-2026-80600, CVE-2026-80601, CVE-2026-80602, CVE-2026-80603,\nCVE-2026-80605, CVE-2026-80609, CVE-2026-80611, CVE-2026-80613,\nCVE-2026-80618, CVE-2026-80619, CVE-2026-80620, CVE-2026-80622,\nCVE-2026-80624, CVE-2026-80626, CVE-2026-80627, CVE-2026-80629,\nCVE-2026-80630, CVE-2026-80635, CVE-2026-80636, CVE-2026-80637,\nCVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,\nCVE-2026-80649, CVE-2026-80650, CVE-2026-80652, CVE-2026-80654,\nCVE-2026-80659, CVE-2026-80660, CVE-2026-80663, CVE-2026-80664,\nCVE-2026-80667, CVE-2026-80669, CVE-2026-80676, CVE-2026-80677,\nCVE-2026-80865, CVE-2026-80867, CVE-2026-80870, CVE-2026-80875,\nCVE-2026-80876, CVE-2026-80877, CVE-2026-80879, CVE-2026-80880,\nCVE-2026-80881, CVE-2026-80883, CVE-2026-80886, CVE-2026-89460,\nCVE-2026-89774)\n","status":"published","published":"2026-10-13T14:54:50Z","modified":"2026-11-09T12:54:55.368242684Z","updated_at":"2026-11-09T13:25:32.592646Z"},{"id":"USN-8918-1","title":"linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - PCI subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - Reset controller framework;\n  - RPMSG subsystem;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - VME bus staging drivers;\n  - TCM subsystem;\n  - TTY drivers;\n  - USB DSL drivers;\n  - Cadence USB3 driver;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS file system;\n  - HFS+ file system;\n  - Journaling layer for block devices (JBD2);\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Memory management;\n  - File system encryption (fscrypt);\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - IPv4 networking;\n  - KVM subsystem;\n  - Mellanox drivers;\n  - Socket messages infrastructure;\n  - Sun RPC protocol;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - Networking core;\n  - IP tunnels definitions;\n  - Netfilter;\n  - SCTP protocol;\n  - Network sockets;\n  - Network traffic control;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Locking primitives;\n  - Kernel module support;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Debug objects infrastructure;\n  - 6LoWPAN network protocol;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Integrity Measurement Architecture(IMA) framework;\n  - SELinux security module;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - Gravis UltraSound ALSA driver;\n  - C-Media CMI8x38 ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Yamaha YMFPCI ALSA driver;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - QCOM ASoC drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n(CVE-2024-56552, CVE-2025-21687, CVE-2025-21985, CVE-2025-23131,\nCVE-2025-38069, CVE-2025-38187, CVE-2025-38563, CVE-2025-38565,\nCVE-2025-40014, CVE-2025-40098, CVE-2026-43010, CVE-2026-43216,\nCVE-2026-45897, CVE-2026-45901, CVE-2026-45944, CVE-2026-46140,\nCVE-2026-46252, CVE-2026-52909, CVE-2026-52928, CVE-2026-53005,\nCVE-2026-53027, CVE-2026-53070, CVE-2026-53078, CVE-2026-53090,\nCVE-2026-53157, CVE-2026-53163, CVE-2026-53167, CVE-2026-53226,\nCVE-2026-53325, CVE-2026-53327, CVE-2026-53361, CVE-2026-53362,\nCVE-2026-53365, CVE-2026-53366, CVE-2026-53381, CVE-2026-53382,\nCVE-2026-53383, CVE-2026-53384, CVE-2026-53385, CVE-2026-53387,\nCVE-2026-53388, CVE-2026-53389, CVE-2026-53390, CVE-2026-53391,\nCVE-2026-53392, CVE-2026-53393, CVE-2026-53397, CVE-2026-53398,\nCVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-53403,\nCVE-2026-63794, CVE-2026-63795, CVE-2026-63796, CVE-2026-63797,\nCVE-2026-63798, CVE-2026-63800, CVE-2026-63801, CVE-2026-63802,\nCVE-2026-63803, CVE-2026-63804, CVE-2026-63806, CVE-2026-63807,\nCVE-2026-63808, CVE-2026-63809, CVE-2026-63810, CVE-2026-63812,\nCVE-2026-63814, CVE-2026-63815, CVE-2026-63816, CVE-2026-63817,\nCVE-2026-63818, CVE-2026-63821, CVE-2026-63822, CVE-2026-63823,\nCVE-2026-63824, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828,\nCVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63833,\nCVE-2026-63834, CVE-2026-63835, CVE-2026-63836, CVE-2026-63940,\nCVE-2026-63970, CVE-2026-64187, CVE-2026-64188, CVE-2026-64189,\nCVE-2026-64191, CVE-2026-64192, CVE-2026-64205, CVE-2026-64206,\nCVE-2026-64241, CVE-2026-64244, CVE-2026-64245, CVE-2026-64246,\nCVE-2026-64247, CVE-2026-64249, CVE-2026-64254, CVE-2026-64256,\nCVE-2026-64266, CVE-2026-64268, CVE-2026-64269, CVE-2026-64270,\nCVE-2026-64271, CVE-2026-64272, CVE-2026-64273, CVE-2026-64274,\nCVE-2026-64275, CVE-2026-64276, CVE-2026-64277, CVE-2026-64279,\nCVE-2026-64280, CVE-2026-64286, CVE-2026-64287, CVE-2026-64289,\nCVE-2026-64294, CVE-2026-64296, CVE-2026-64297, CVE-2026-64298,\nCVE-2026-64299, CVE-2026-64301, CVE-2026-64303, CVE-2026-64304,\nCVE-2026-64305, CVE-2026-64306, CVE-2026-64312, CVE-2026-64313,\nCVE-2026-64315, CVE-2026-64316, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64319, CVE-2026-64320, CVE-2026-64321, CVE-2026-64322,\nCVE-2026-64323, CVE-2026-64324, CVE-2026-64326, CVE-2026-64329,\nCVE-2026-64330, CVE-2026-64331, CVE-2026-64332, CVE-2026-64333,\nCVE-2026-64334, CVE-2026-64335, CVE-2026-64336, CVE-2026-64337,\nCVE-2026-64338, CVE-2026-64340, CVE-2026-64341, CVE-2026-64342,\nCVE-2026-64343, CVE-2026-64344, CVE-2026-64345, CVE-2026-64346,\nCVE-2026-64347, CVE-2026-64348, CVE-2026-64350, CVE-2026-64351,\nCVE-2026-64352, CVE-2026-64355, CVE-2026-64358, CVE-2026-64359,\nCVE-2026-64360, CVE-2026-64361, CVE-2026-64362, CVE-2026-64363,\nCVE-2026-64364, CVE-2026-64365, CVE-2026-64368, CVE-2026-64369,\nCVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,\nCVE-2026-64374, CVE-2026-64375, CVE-2026-64376, CVE-2026-64377,\nCVE-2026-64378, CVE-2026-64379, CVE-2026-64380, CVE-2026-64381,\nCVE-2026-64382, CVE-2026-64383, CVE-2026-64384, CVE-2026-64385,\nCVE-2026-64386, CVE-2026-64387, CVE-2026-64390, CVE-2026-64391,\nCVE-2026-64392, CVE-2026-64393, CVE-2026-64394, CVE-2026-64395,\nCVE-2026-64396, CVE-2026-64397, CVE-2026-64398, CVE-2026-64399,\nCVE-2026-64401, CVE-2026-64402, CVE-2026-64403, CVE-2026-64404,\nCVE-2026-64405, CVE-2026-64406, CVE-2026-64407, CVE-2026-64408,\nCVE-2026-64409, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,\nCVE-2026-64417, CVE-2026-64418, CVE-2026-64419, CVE-2026-64420,\nCVE-2026-64421, CVE-2026-64422, CVE-2026-64423, CVE-2026-64424,\nCVE-2026-64425, CVE-2026-64428, CVE-2026-64429, CVE-2026-64430,\nCVE-2026-64432, CVE-2026-64433, CVE-2026-64434, CVE-2026-64435,\nCVE-2026-64436, CVE-2026-64437, CVE-2026-64438, CVE-2026-64440,\nCVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444,\nCVE-2026-64445, CVE-2026-64446, CVE-2026-64448, CVE-2026-64449,\nCVE-2026-64450, CVE-2026-64452, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64458, CVE-2026-64461, CVE-2026-64462,\nCVE-2026-64463, CVE-2026-64465, CVE-2026-64468, CVE-2026-64469,\nCVE-2026-64470, CVE-2026-64471, CVE-2026-64472, CVE-2026-64473,\nCVE-2026-64474, CVE-2026-64475, CVE-2026-64476, CVE-2026-64478,\nCVE-2026-64479, CVE-2026-64480, CVE-2026-64481, CVE-2026-64482,\nCVE-2026-64483, CVE-2026-64484, CVE-2026-64486, CVE-2026-64487,\nCVE-2026-64488, CVE-2026-64489, CVE-2026-64493, CVE-2026-64494,\nCVE-2026-64495, CVE-2026-64496, CVE-2026-64497, CVE-2026-64500,\nCVE-2026-64503, CVE-2026-64504, CVE-2026-64505, CVE-2026-64507,\nCVE-2026-64508, CVE-2026-64510, CVE-2026-64511, CVE-2026-64512,\nCVE-2026-64514, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533,\nCVE-2026-64534, CVE-2026-64535, CVE-2026-64536, CVE-2026-64537,\nCVE-2026-64538, CVE-2026-64539, CVE-2026-64540, CVE-2026-64541,\nCVE-2026-64542, CVE-2026-64543, CVE-2026-64544, CVE-2026-64545,\nCVE-2026-64546, CVE-2026-64547, CVE-2026-64548, CVE-2026-64549,\nCVE-2026-64550, CVE-2026-64551, CVE-2026-64552, CVE-2026-64553,\nCVE-2026-64554, CVE-2026-64555, CVE-2026-64556, CVE-2026-64557,\nCVE-2026-64560, CVE-2026-64561, CVE-2026-64562, CVE-2026-64564,\nCVE-2026-64565, CVE-2026-64567, CVE-2026-64568, CVE-2026-64569,\nCVE-2026-64570, CVE-2026-64571, CVE-2026-64572, CVE-2026-64573,\nCVE-2026-64574, CVE-2026-64576, CVE-2026-64577, CVE-2026-64578,\nCVE-2026-64579, CVE-2026-64580, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64585, CVE-2026-64590, CVE-2026-64593,\nCVE-2026-64594, CVE-2026-64597, CVE-2026-64598, CVE-2026-64599,\nCVE-2026-64600, CVE-2026-64602, CVE-2026-64603, CVE-2026-64604,\nCVE-2026-68083, CVE-2026-68084, CVE-2026-68085, CVE-2026-68088,\nCVE-2026-68090, CVE-2026-68091, CVE-2026-68093, CVE-2026-68096,\nCVE-2026-68097, CVE-2026-68098, CVE-2026-68099, CVE-2026-68100,\nCVE-2026-68104, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108,\nCVE-2026-68110, CVE-2026-68111, CVE-2026-68112, CVE-2026-68115,\nCVE-2026-68116, CVE-2026-68117, CVE-2026-68119, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68124, CVE-2026-68125, CVE-2026-68126,\nCVE-2026-68127, CVE-2026-68129, CVE-2026-68130, CVE-2026-68131,\nCVE-2026-68135, CVE-2026-68136, CVE-2026-68137, CVE-2026-68139,\nCVE-2026-68140, CVE-2026-68141, CVE-2026-68142, CVE-2026-68143,\nCVE-2026-68144, CVE-2026-68145, CVE-2026-68146, CVE-2026-68147,\nCVE-2026-68148, CVE-2026-68149, CVE-2026-68151, CVE-2026-68153,\nCVE-2026-68154, CVE-2026-68155, CVE-2026-68156, CVE-2026-68157,\nCVE-2026-68158, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162,\nCVE-2026-68164, CVE-2026-68165, CVE-2026-68175, CVE-2026-68176,\nCVE-2026-68178, CVE-2026-68179, CVE-2026-68180, CVE-2026-68181,\nCVE-2026-68182, CVE-2026-68183, CVE-2026-68184, CVE-2026-68186,\nCVE-2026-68187, CVE-2026-68188, CVE-2026-68189, CVE-2026-68190,\nCVE-2026-68192, CVE-2026-68193, CVE-2026-68194, CVE-2026-68195,\nCVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68202,\nCVE-2026-68203, CVE-2026-68204, CVE-2026-68205, CVE-2026-68206,\nCVE-2026-68207, CVE-2026-68209, CVE-2026-68210, CVE-2026-68212,\nCVE-2026-68213, CVE-2026-68214, CVE-2026-68215, CVE-2026-68216,\nCVE-2026-68217, CVE-2026-68218, CVE-2026-68219, CVE-2026-68220,\nCVE-2026-68221, CVE-2026-68222, CVE-2026-68223, CVE-2026-68225,\nCVE-2026-68226, CVE-2026-68227, CVE-2026-68228, CVE-2026-68229,\nCVE-2026-68231, CVE-2026-68234, CVE-2026-68235, CVE-2026-68236,\nCVE-2026-68243, CVE-2026-68244, CVE-2026-68246, CVE-2026-68247,\nCVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68251,\nCVE-2026-68255, CVE-2026-68256, CVE-2026-68259, CVE-2026-68260,\nCVE-2026-68261, CVE-2026-68262, CVE-2026-68263, CVE-2026-68269,\nCVE-2026-68271, CVE-2026-68272, CVE-2026-68277, CVE-2026-68278,\nCVE-2026-68279, CVE-2026-68280, CVE-2026-68281, CVE-2026-68284,\nCVE-2026-68290, CVE-2026-68293, CVE-2026-68294, CVE-2026-68297,\nCVE-2026-68299, CVE-2026-68300, CVE-2026-68301, CVE-2026-68302,\nCVE-2026-68304, CVE-2026-68306, CVE-2026-68308, CVE-2026-68309,\nCVE-2026-68310, CVE-2026-68313, CVE-2026-68314, CVE-2026-68315,\nCVE-2026-68317, CVE-2026-68318, CVE-2026-68319, CVE-2026-68320,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68329, CVE-2026-68331, CVE-2026-68333,\nCVE-2026-68335, CVE-2026-68336, CVE-2026-68338, CVE-2026-68339,\nCVE-2026-68340, CVE-2026-68343, CVE-2026-68346, CVE-2026-68348,\nCVE-2026-68349, CVE-2026-68350, CVE-2026-68351, CVE-2026-68352,\nCVE-2026-68353, CVE-2026-68354, CVE-2026-68355, CVE-2026-68357,\nCVE-2026-68359, CVE-2026-68360, CVE-2026-68361, CVE-2026-68362,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,\nCVE-2026-68369, CVE-2026-68370, CVE-2026-68371, CVE-2026-68372,\nCVE-2026-68373, CVE-2026-68376, CVE-2026-68377, CVE-2026-68381,\nCVE-2026-68386, CVE-2026-68388, CVE-2026-68389, CVE-2026-68391,\nCVE-2026-68392, CVE-2026-68395, CVE-2026-68396, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68399, CVE-2026-68402, CVE-2026-68403,\nCVE-2026-68405, CVE-2026-68406, CVE-2026-68407, CVE-2026-68408,\nCVE-2026-68410, CVE-2026-68411, CVE-2026-68413, CVE-2026-68414,\nCVE-2026-68416, CVE-2026-68417, CVE-2026-68419, CVE-2026-68422,\nCVE-2026-68425, CVE-2026-68427, CVE-2026-68428, CVE-2026-68429,\nCVE-2026-68430, CVE-2026-68432, CVE-2026-68433, CVE-2026-68437,\nCVE-2026-68439, CVE-2026-68442, CVE-2026-68443, CVE-2026-68444,\nCVE-2026-68445, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450,\nCVE-2026-68454, CVE-2026-68456, CVE-2026-68457, CVE-2026-68459,\nCVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,\nCVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68476,\nCVE-2026-68477, CVE-2026-68478, CVE-2026-68479, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72007, CVE-2026-72010, CVE-2026-72012,\nCVE-2026-72013, CVE-2026-72014, CVE-2026-72015, CVE-2026-72017,\nCVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022,\nCVE-2026-72023, CVE-2026-72024, CVE-2026-72025, CVE-2026-72028,\nCVE-2026-72029, CVE-2026-72030, CVE-2026-72033, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72041, CVE-2026-72045, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72051, CVE-2026-72052,\nCVE-2026-72053, CVE-2026-72054, CVE-2026-72055, CVE-2026-72056,\nCVE-2026-72057, CVE-2026-72058, CVE-2026-72059, CVE-2026-72061,\nCVE-2026-72062, CVE-2026-72063, CVE-2026-72066, CVE-2026-72067,\nCVE-2026-72068, CVE-2026-72069, CVE-2026-72070, CVE-2026-72071,\nCVE-2026-72072, CVE-2026-72074, CVE-2026-72075, CVE-2026-72076,\nCVE-2026-72077, CVE-2026-72078, CVE-2026-72079, CVE-2026-72081,\nCVE-2026-72082, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085,\nCVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,\nCVE-2026-72096, CVE-2026-72097, CVE-2026-72099, CVE-2026-72102,\nCVE-2026-72105, CVE-2026-72106, CVE-2026-72107, CVE-2026-72108,\nCVE-2026-72109, CVE-2026-72110, CVE-2026-72113, CVE-2026-72114,\nCVE-2026-72115, CVE-2026-72116, CVE-2026-72117, CVE-2026-72118,\nCVE-2026-72119, CVE-2026-72120, CVE-2026-72121, CVE-2026-72122,\nCVE-2026-72123, CVE-2026-72124, CVE-2026-72125, CVE-2026-72126,\nCVE-2026-72127, CVE-2026-72129, CVE-2026-72130, CVE-2026-72132,\nCVE-2026-72133, CVE-2026-72135, CVE-2026-72136, CVE-2026-72138,\nCVE-2026-72140, CVE-2026-72142, CVE-2026-72144, CVE-2026-72146,\nCVE-2026-72147, CVE-2026-72148, CVE-2026-72149, CVE-2026-72152,\nCVE-2026-72153, CVE-2026-72155, CVE-2026-72156, CVE-2026-72157,\nCVE-2026-72158, CVE-2026-72159, CVE-2026-72160, CVE-2026-72161,\nCVE-2026-72163, CVE-2026-72164, CVE-2026-72165, CVE-2026-72166,\nCVE-2026-72167, CVE-2026-72168, CVE-2026-72170, CVE-2026-72171,\nCVE-2026-72172, CVE-2026-72174, CVE-2026-72175, CVE-2026-72176,\nCVE-2026-72177, CVE-2026-72179, CVE-2026-72181, CVE-2026-72182,\nCVE-2026-72191, CVE-2026-72192, CVE-2026-72193, CVE-2026-72194,\nCVE-2026-72195, CVE-2026-72196, CVE-2026-72197, CVE-2026-72212,\nCVE-2026-72213, CVE-2026-72214, CVE-2026-72215, CVE-2026-72216,\nCVE-2026-72217, CVE-2026-72218, CVE-2026-72219, CVE-2026-72221,\nCVE-2026-72222, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72226, CVE-2026-72227, CVE-2026-72228, CVE-2026-72229,\nCVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233,\nCVE-2026-72234, CVE-2026-72235, CVE-2026-72236, CVE-2026-72237,\nCVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72242,\nCVE-2026-72243, CVE-2026-72244, CVE-2026-72245, CVE-2026-72247,\nCVE-2026-72250, CVE-2026-72251, CVE-2026-72252, CVE-2026-72253,\nCVE-2026-72254, CVE-2026-72255, CVE-2026-72256, CVE-2026-72257,\nCVE-2026-72258, CVE-2026-72259, CVE-2026-72260, CVE-2026-72261,\nCVE-2026-72262, CVE-2026-72264, CVE-2026-72265, CVE-2026-72266,\nCVE-2026-72267, CVE-2026-72268, CVE-2026-72269, CVE-2026-72270,\nCVE-2026-72271, CVE-2026-72272, CVE-2026-72273, CVE-2026-72274,\nCVE-2026-72275, CVE-2026-72276, CVE-2026-72282, CVE-2026-72284,\nCVE-2026-72289, CVE-2026-72290, CVE-2026-72296, CVE-2026-72297,\nCVE-2026-72298, CVE-2026-72299, CVE-2026-72300, CVE-2026-72301,\nCVE-2026-72302, CVE-2026-72304, CVE-2026-72305, CVE-2026-72306,\nCVE-2026-72307, CVE-2026-72308, CVE-2026-72310, CVE-2026-72312,\nCVE-2026-72314, CVE-2026-72316, CVE-2026-72317, CVE-2026-72318,\nCVE-2026-72319, CVE-2026-72320, CVE-2026-72322, CVE-2026-72323,\nCVE-2026-72324, CVE-2026-72325, CVE-2026-72326, CVE-2026-72327,\nCVE-2026-72330, CVE-2026-72335, CVE-2026-72336, CVE-2026-72338,\nCVE-2026-72339, CVE-2026-72340, CVE-2026-72342, CVE-2026-72343,\nCVE-2026-72347, CVE-2026-72348, CVE-2026-72349, CVE-2026-72350,\nCVE-2026-72351, CVE-2026-72352, CVE-2026-72361, CVE-2026-72362,\nCVE-2026-72369, CVE-2026-72371, CVE-2026-72373, CVE-2026-72374,\nCVE-2026-72376, CVE-2026-72378, CVE-2026-72379, CVE-2026-72382,\nCVE-2026-72384, CVE-2026-72389, CVE-2026-72390, CVE-2026-72391,\nCVE-2026-72392, CVE-2026-72395, CVE-2026-72396, CVE-2026-72399,\nCVE-2026-72400, CVE-2026-72405, CVE-2026-72406, CVE-2026-72409,\nCVE-2026-72410, CVE-2026-72414, CVE-2026-72416, CVE-2026-72418,\nCVE-2026-72419, CVE-2026-72420, CVE-2026-72421, CVE-2026-72422,\nCVE-2026-72424, CVE-2026-72425, CVE-2026-72427, CVE-2026-72428,\nCVE-2026-72430, CVE-2026-72433, CVE-2026-72434, CVE-2026-72435,\nCVE-2026-72436, CVE-2026-72437, CVE-2026-72441, CVE-2026-72443,\nCVE-2026-72444, CVE-2026-72447, CVE-2026-72448, CVE-2026-72449,\nCVE-2026-72450, CVE-2026-72451, CVE-2026-72459, CVE-2026-72460,\nCVE-2026-72464, CVE-2026-72466, CVE-2026-72467, CVE-2026-72469,\nCVE-2026-72470, CVE-2026-72473, CVE-2026-72474, CVE-2026-72476,\nCVE-2026-72478, CVE-2026-72479, CVE-2026-72480, CVE-2026-72481,\nCVE-2026-72483, CVE-2026-72484, CVE-2026-72486, CVE-2026-72487,\nCVE-2026-72489, CVE-2026-72491, CVE-2026-72492, CVE-2026-72502,\nCVE-2026-74255, CVE-2026-74256, CVE-2026-74262, CVE-2026-74263,\nCVE-2026-74265, CVE-2026-74267, CVE-2026-74270, CVE-2026-74271,\nCVE-2026-74276, CVE-2026-74278, CVE-2026-74279, CVE-2026-74280,\nCVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284,\nCVE-2026-74287, CVE-2026-74288, CVE-2026-74290, CVE-2026-74292,\nCVE-2026-74293, CVE-2026-74295, CVE-2026-74296, CVE-2026-74297,\nCVE-2026-74300, CVE-2026-74302, CVE-2026-74303, CVE-2026-74305,\nCVE-2026-74307, CVE-2026-74308, CVE-2026-74310, CVE-2026-74312,\nCVE-2026-74313, CVE-2026-74318, CVE-2026-74320, CVE-2026-74321,\nCVE-2026-74327, CVE-2026-74329, CVE-2026-74330, CVE-2026-74331,\nCVE-2026-74339, CVE-2026-74340, CVE-2026-74341, CVE-2026-74345,\nCVE-2026-74346, CVE-2026-74348, CVE-2026-74349, CVE-2026-74351,\nCVE-2026-74356, CVE-2026-74359, CVE-2026-74362, CVE-2026-74363,\nCVE-2026-74365, CVE-2026-74376, CVE-2026-74377, CVE-2026-74378,\nCVE-2026-74379, CVE-2026-74380, CVE-2026-74381, CVE-2026-74382,\nCVE-2026-74384, CVE-2026-74386, CVE-2026-74387, CVE-2026-74389,\nCVE-2026-74390, CVE-2026-74391, CVE-2026-74394, CVE-2026-74395,\nCVE-2026-74397, CVE-2026-74398, CVE-2026-74399, CVE-2026-74401,\nCVE-2026-74402, CVE-2026-74406, CVE-2026-74408, CVE-2026-74410,\nCVE-2026-74411, CVE-2026-74416, CVE-2026-74417, CVE-2026-74424,\nCVE-2026-74426, CVE-2026-74427, CVE-2026-74432, CVE-2026-74435,\nCVE-2026-74436, CVE-2026-74438, CVE-2026-74439, CVE-2026-74584,\nCVE-2026-80591, CVE-2026-80593, CVE-2026-80594, CVE-2026-80595,\nCVE-2026-80597, CVE-2026-80598, CVE-2026-80599, CVE-2026-80600,\nCVE-2026-80601, CVE-2026-80602, CVE-2026-80603, CVE-2026-80605,\nCVE-2026-80609, CVE-2026-80611, CVE-2026-80613, CVE-2026-80618,\nCVE-2026-80619, CVE-2026-80620, CVE-2026-80622, CVE-2026-80624,\nCVE-2026-80626, CVE-2026-80627, CVE-2026-80629, CVE-2026-80630,\nCVE-2026-80635, CVE-2026-80636, CVE-2026-80637, CVE-2026-80644,\nCVE-2026-80645, CVE-2026-80646, CVE-2026-80647, CVE-2026-80649,\nCVE-2026-80650, CVE-2026-80652, CVE-2026-80654, CVE-2026-80659,\nCVE-2026-80660, CVE-2026-80663, CVE-2026-80664, CVE-2026-80667,\nCVE-2026-80669, CVE-2026-80676, CVE-2026-80677, CVE-2026-80865,\nCVE-2026-80867, CVE-2026-80870, CVE-2026-80875, CVE-2026-80876,\nCVE-2026-80877, CVE-2026-80879, CVE-2026-80880, CVE-2026-80881,\nCVE-2026-80883, CVE-2026-80886, CVE-2026-89460, CVE-2026-89774)\n","status":"published","published":"2026-10-13T15:09:31Z","modified":"2026-11-09T12:51:11.158472036Z","updated_at":"2026-11-09T13:26:57.304985Z"},{"id":"USN-8963-1","title":"linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities","description":"Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol\nimplementation in the Linux kernel, leading to use-after-free\nvulnerabilities. A local attacker could possibly use this to cause a denial\nof service (system crash). (CVE-2022-1205)\n\nIt was discovered that the i.MX clock driver in the Linux kernel did not\nproperly handle certain memory allocation failure conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2022-3114)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - USB Gadget drivers;\n  - Networking core;\n  - User-space API (UAPI);\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Speakup Console Speech Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Auxiliary display drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - Hardware random number generator core;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Clocksource drivers;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - ARM SCPI message protocol;\n  - Google firmware drivers;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - HSI subsystem;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - On-Chip Interconnect management framework;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Analog Devices digital potentiometer driver;\n  - Broadcom VK accelerator driver;\n  - Fastrpc Driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - PA-RISC drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Chrome hardware platform drivers;\n  - Mellanox platform drivers;\n  - Microsoft Surface platform drivers;\n  - x86 platform drivers;\n  - Generic PM domains;\n  - System reset/shutdown drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - Reset controller framework;\n  - RPMSG subsystem;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - SPI subsystem;\n  - small TFT LCD display modules;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - Userspace I/O drivers;\n  - USB DSL drivers;\n  - Cypress C67X00 USB driver;\n  - Cadence USB3 driver;\n  - USB Device Class drivers;\n  - ULPI bus;\n  - USB core drivers;\n  - DesignWare USB2 driver;\n  - DesignWare USB3 driver;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - USB ChaosKey driver;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USS720 USB parallel port adapter driver;\n  - MediaTek USB3 DRD driver;\n  - USB Serial drivers;\n  - USB Mass Storage drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - W1 Dallas's 1-wire bus driver;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - File systems infrastructure;\n  - AFS file system;\n  - BFS file system;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - eCrypt file system;\n  - EROFS file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FAT file system;\n  - FUSE (File system in Userspace);\n  - HFS file system;\n  - HFS+ file system;\n  - HugeTLB file system;\n  - Journaling layer for block devices (JBD2);\n  - JFS file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Proc file system;\n  - SMB network file system;\n  - SquashFS file system;\n  - UBI file system;\n  - UDF file system;\n  - XFS file system;\n  - Key management;\n  - BPF subsystem;\n  - Software nodes and device properties;\n  - Glob pattern matching library;\n  - IPv4 networking;\n  - Internal shared memory driver;\n  - KVM subsystem;\n  - Netfilter;\n  - Scheduler infrastructure;\n  - Socket messages infrastructure;\n  - Network sockets;\n  - Sun RPC protocol;\n  - Virtio network driver;\n  - Memory Management;\n  - Media input infrastructure;\n  - Network traffic control;\n  - IPv6 networking;\n  - Amateur Radio drivers;\n  - Bluetooth subsystem;\n  - IP tunnels definitions;\n  - NFC subsystem;\n  - SCTP protocol;\n  - TCP network protocol;\n  - eXpress Data Path;\n  - XFRM subsystem;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Perf events;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kernel futex primitives;\n  - KCOV code coverage framework;\n  - Locking primitives;\n  - RCU subsystem;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Workqueue subsystem;\n  - Kernel build system;\n  - Cryptographic library;\n  - Debug objects infrastructure;\n  - Resizable hashtable library;\n  - Heterogeneous memory management;\n  - UCS-2 string library;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - 802.1Q VLAN protocol;\n  - 9P file system network protocol;\n  - Appletalk network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Distributed Switch Architecture;\n  - Ethtool driver;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Linux Security Modules (LSM) Framework;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - Simplified Mandatory Access Control Kernel framework;\n  - Apple Onboard Audio ALSA driver;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - Generic sound devices;\n  - FireWire sound drivers;\n  - HD-audio driver;\n  - ESS ES18xx ALSA driver;\n  - ESS Solo-1 ALSA driver;\n  - Digigram PCXHR ALSA driver;\n  - Cirrus Logic audio codecs;\n  - QCOM ASoC drivers;\n  - Realtek audio codecs;\n  - Simple audio multiplexer codec driver;\n  - WCD audio codecs;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - Rockchip ASoC drivers;\n  - SoC audio core drivers;\n  - Spreadtrum ASoC drivers;\n  - STI ASoC drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - Xilinx ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n(CVE-2022-49234, CVE-2022-49359, CVE-2022-49562, CVE-2022-49651,\nCVE-2022-49858, CVE-2022-50071, CVE-2022-50303, CVE-2022-50406,\nCVE-2023-52676, CVE-2023-53231, CVE-2023-53320, CVE-2023-53707,\nCVE-2023-54125, CVE-2023-54271, CVE-2024-41062, CVE-2024-46754,\nCVE-2024-49568, CVE-2024-50017, CVE-2024-53187, CVE-2024-53210,\nCVE-2024-53220, CVE-2024-54683, CVE-2024-57945, CVE-2024-57982,\nCVE-2024-57999, CVE-2024-58094, CVE-2024-58095, CVE-2024-58096,\nCVE-2025-21649, CVE-2025-21651, CVE-2025-21759, CVE-2025-21801,\nCVE-2025-21812, CVE-2025-21947, CVE-2025-22026, CVE-2025-22039,\nCVE-2025-22057, CVE-2025-22083, CVE-2025-22103, CVE-2025-23131,\nCVE-2025-23160, CVE-2025-37861, CVE-2025-37920, CVE-2025-38069,\nCVE-2025-38097, CVE-2025-38239, CVE-2025-38259, CVE-2025-38349,\nCVE-2025-38361, CVE-2025-38615, CVE-2025-38643, CVE-2025-39726,\nCVE-2025-39779, CVE-2025-39810, CVE-2025-39863, CVE-2025-39925,\nCVE-2025-39929, CVE-2025-39931, CVE-2025-40054, CVE-2025-40102,\nCVE-2025-40123, CVE-2025-68190, CVE-2025-68794, CVE-2026-100070,\nCVE-2026-100075, CVE-2026-23191, CVE-2026-23364, CVE-2026-31420,\nCVE-2026-31449, CVE-2026-31451, CVE-2026-31610, CVE-2026-31700,\nCVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712,\nCVE-2026-31715, CVE-2026-43064, CVE-2026-43088, CVE-2026-43216,\nCVE-2026-43219, CVE-2026-43350, CVE-2026-43355, CVE-2026-43437,\nCVE-2026-43456, CVE-2026-43491, CVE-2026-43492, CVE-2026-45850,\nCVE-2026-45930, CVE-2026-45991, CVE-2026-45999, CVE-2026-46003,\nCVE-2026-46021, CVE-2026-46026, CVE-2026-46038, CVE-2026-46052,\nCVE-2026-46056, CVE-2026-46065, CVE-2026-46069, CVE-2026-46078,\nCVE-2026-46086, CVE-2026-46090, CVE-2026-46091, CVE-2026-46092,\nCVE-2026-46103, CVE-2026-46113, CVE-2026-46116, CVE-2026-46158,\nCVE-2026-46159, CVE-2026-46160, CVE-2026-46169, CVE-2026-46170,\nCVE-2026-46180, CVE-2026-46191, CVE-2026-46193, CVE-2026-46196,\nCVE-2026-46208, CVE-2026-46242, CVE-2026-46252, CVE-2026-46291,\nCVE-2026-46292, CVE-2026-46299, CVE-2026-46320, CVE-2026-46321,\nCVE-2026-46322, CVE-2026-52909, CVE-2026-52910, CVE-2026-52913,\nCVE-2026-52917, CVE-2026-52918, CVE-2026-52923, CVE-2026-52927,\nCVE-2026-52928, CVE-2026-52929, CVE-2026-52930, CVE-2026-52933,\nCVE-2026-52934, CVE-2026-52935, CVE-2026-52939, CVE-2026-52942,\nCVE-2026-52943, CVE-2026-52944, CVE-2026-52947, CVE-2026-52948,\nCVE-2026-52977, CVE-2026-52988, CVE-2026-53078, CVE-2026-53080,\nCVE-2026-53089, CVE-2026-53090, CVE-2026-53133, CVE-2026-53134,\nCVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,\nCVE-2026-53139, CVE-2026-53146, CVE-2026-53148, CVE-2026-53149,\nCVE-2026-53150, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159,\nCVE-2026-53161, CVE-2026-53163, CVE-2026-53167, CVE-2026-53168,\nCVE-2026-53177, CVE-2026-53181, CVE-2026-53189, CVE-2026-53194,\nCVE-2026-53195, CVE-2026-53196, CVE-2026-53199, CVE-2026-53208,\nCVE-2026-53213, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,\nCVE-2026-53223, CVE-2026-53227, CVE-2026-53238, CVE-2026-53239,\nCVE-2026-53245, CVE-2026-53249, CVE-2026-53252, CVE-2026-53253,\nCVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53263,\nCVE-2026-53264, CVE-2026-53265, CVE-2026-53266, CVE-2026-53268,\nCVE-2026-53269, CVE-2026-53270, CVE-2026-53273, CVE-2026-53275,\nCVE-2026-53325, CVE-2026-53329, CVE-2026-53331, CVE-2026-53332,\nCVE-2026-53337, CVE-2026-53339, CVE-2026-53352, CVE-2026-53356,\nCVE-2026-53357, CVE-2026-53358, CVE-2026-53381, CVE-2026-53382,\nCVE-2026-53383, CVE-2026-53385, CVE-2026-53388, CVE-2026-53391,\nCVE-2026-53392, CVE-2026-53393, CVE-2026-53397, CVE-2026-53399,\nCVE-2026-53400, CVE-2026-53402, CVE-2026-53403, CVE-2026-63794,\nCVE-2026-63796, CVE-2026-63798, CVE-2026-63801, CVE-2026-63803,\nCVE-2026-63806, CVE-2026-63807, CVE-2026-63809, CVE-2026-63810,\nCVE-2026-63814, CVE-2026-63815, CVE-2026-63817, CVE-2026-63818,\nCVE-2026-63822, CVE-2026-63823, CVE-2026-63824, CVE-2026-63827,\nCVE-2026-63828, CVE-2026-63829, CVE-2026-63830, CVE-2026-63831,\nCVE-2026-63833, CVE-2026-63834, CVE-2026-63835, CVE-2026-63836,\nCVE-2026-63867, CVE-2026-63868, CVE-2026-63870, CVE-2026-63875,\nCVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,\nCVE-2026-63893, CVE-2026-63895, CVE-2026-63897, CVE-2026-63898,\nCVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,\nCVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63908,\nCVE-2026-63913, CVE-2026-63914, CVE-2026-63915, CVE-2026-63916,\nCVE-2026-63917, CVE-2026-63919, CVE-2026-63920, CVE-2026-63921,\nCVE-2026-63925, CVE-2026-63926, CVE-2026-63927, CVE-2026-63928,\nCVE-2026-63930, CVE-2026-63931, CVE-2026-63933, CVE-2026-63934,\nCVE-2026-63942, CVE-2026-63947, CVE-2026-63948, CVE-2026-63954,\nCVE-2026-63956, CVE-2026-63957, CVE-2026-63960, CVE-2026-63961,\nCVE-2026-63964, CVE-2026-63967, CVE-2026-63971, CVE-2026-63975,\nCVE-2026-63976, CVE-2026-63985, CVE-2026-63990, CVE-2026-63991,\nCVE-2026-64002, CVE-2026-64004, CVE-2026-64005, CVE-2026-64009,\nCVE-2026-64010, CVE-2026-64011, CVE-2026-64012, CVE-2026-64014,\nCVE-2026-64048, CVE-2026-64090, CVE-2026-64093, CVE-2026-64094,\nCVE-2026-64095, CVE-2026-64116, CVE-2026-64118, CVE-2026-64123,\nCVE-2026-64126, CVE-2026-64137, CVE-2026-64170, CVE-2026-64187,\nCVE-2026-64188, CVE-2026-64189, CVE-2026-64191, CVE-2026-64192,\nCVE-2026-64206, CVE-2026-64222, CVE-2026-64225, CVE-2026-64234,\nCVE-2026-64237, CVE-2026-64242, CVE-2026-64243, CVE-2026-64246,\nCVE-2026-64249, CVE-2026-64266, CVE-2026-64268, CVE-2026-64269,\nCVE-2026-64270, CVE-2026-64271, CVE-2026-64272, CVE-2026-64273,\nCVE-2026-64274, CVE-2026-64275, CVE-2026-64276, CVE-2026-64277,\nCVE-2026-64279, CVE-2026-64280, CVE-2026-64294, CVE-2026-64296,\nCVE-2026-64298, CVE-2026-64299, CVE-2026-64301, CVE-2026-64303,\nCVE-2026-64304, CVE-2026-64306, CVE-2026-64312, CVE-2026-64313,\nCVE-2026-64315, CVE-2026-64316, CVE-2026-64317, CVE-2026-64318,\nCVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64329,\nCVE-2026-64330, CVE-2026-64331, CVE-2026-64332, CVE-2026-64333,\nCVE-2026-64334, CVE-2026-64335, CVE-2026-64336, CVE-2026-64337,\nCVE-2026-64338, CVE-2026-64340, CVE-2026-64342, CVE-2026-64343,\nCVE-2026-64344, CVE-2026-64346, CVE-2026-64347, CVE-2026-64350,\nCVE-2026-64351, CVE-2026-64352, CVE-2026-64355, CVE-2026-64359,\nCVE-2026-64360, CVE-2026-64361, CVE-2026-64362, CVE-2026-64363,\nCVE-2026-64364, CVE-2026-64370, CVE-2026-64371, CVE-2026-64372,\nCVE-2026-64373, CVE-2026-64374, CVE-2026-64375, CVE-2026-64379,\nCVE-2026-64380, CVE-2026-64381, CVE-2026-64390, CVE-2026-64401,\nCVE-2026-64403, CVE-2026-64408, CVE-2026-64411, CVE-2026-64412,\nCVE-2026-64413, CVE-2026-64420, CVE-2026-64422, CVE-2026-64423,\nCVE-2026-64425, CVE-2026-64428, CVE-2026-64429, CVE-2026-64430,\nCVE-2026-64432, CVE-2026-64435, CVE-2026-64436, CVE-2026-64438,\nCVE-2026-64440, CVE-2026-64441, CVE-2026-64442, CVE-2026-64443,\nCVE-2026-64444, CVE-2026-64445, CVE-2026-64446, CVE-2026-64448,\nCVE-2026-64450, CVE-2026-64452, CVE-2026-64454, CVE-2026-64455,\nCVE-2026-64456, CVE-2026-64461, CVE-2026-64462, CVE-2026-64465,\nCVE-2026-64468, CVE-2026-64469, CVE-2026-64470, CVE-2026-64471,\nCVE-2026-64475, CVE-2026-64478, CVE-2026-64483, CVE-2026-64484,\nCVE-2026-64487, CVE-2026-64488, CVE-2026-64494, CVE-2026-64495,\nCVE-2026-64496, CVE-2026-64497, CVE-2026-64500, CVE-2026-64503,\nCVE-2026-64504, CVE-2026-64505, CVE-2026-64510, CVE-2026-64512,\nCVE-2026-64514, CVE-2026-64524, CVE-2026-64527, CVE-2026-64528,\nCVE-2026-64529, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533,\nCVE-2026-64534, CVE-2026-64535, CVE-2026-64536, CVE-2026-64537,\nCVE-2026-64538, CVE-2026-64540, CVE-2026-64541, CVE-2026-64543,\nCVE-2026-64544, CVE-2026-64545, CVE-2026-64546, CVE-2026-64547,\nCVE-2026-64548, CVE-2026-64549, CVE-2026-64550, CVE-2026-64551,\nCVE-2026-64553, CVE-2026-64554, CVE-2026-64560, CVE-2026-64561,\nCVE-2026-64562, CVE-2026-64563, CVE-2026-64564, CVE-2026-64565,\nCVE-2026-64567, CVE-2026-64569, CVE-2026-64571, CVE-2026-64572,\nCVE-2026-64573, CVE-2026-64576, CVE-2026-64578, CVE-2026-64579,\nCVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584,\nCVE-2026-64585, CVE-2026-64586, CVE-2026-64590, CVE-2026-64593,\nCVE-2026-64594, CVE-2026-64599, CVE-2026-64600, CVE-2026-64602,\nCVE-2026-64604, CVE-2026-68082, CVE-2026-68088, CVE-2026-68090,\nCVE-2026-68091, CVE-2026-68096, CVE-2026-68104, CVE-2026-68106,\nCVE-2026-68111, CVE-2026-68115, CVE-2026-68117, CVE-2026-68121,\nCVE-2026-68123, CVE-2026-68125, CVE-2026-68127, CVE-2026-68129,\nCVE-2026-68130, CVE-2026-68131, CVE-2026-68132, CVE-2026-68135,\nCVE-2026-68137, CVE-2026-68138, CVE-2026-68140, CVE-2026-68141,\nCVE-2026-68142, CVE-2026-68143, CVE-2026-68144, CVE-2026-68146,\nCVE-2026-68151, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155,\nCVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68159,\nCVE-2026-68160, CVE-2026-68162, CVE-2026-68175, CVE-2026-68176,\nCVE-2026-68180, CVE-2026-68182, CVE-2026-68183, CVE-2026-68184,\nCVE-2026-68186, CVE-2026-68187, CVE-2026-68188, CVE-2026-68190,\nCVE-2026-68192, CVE-2026-68195, CVE-2026-68196, CVE-2026-68197,\nCVE-2026-68198, CVE-2026-68199, CVE-2026-68202, CVE-2026-68204,\nCVE-2026-68205, CVE-2026-68209, CVE-2026-68212, CVE-2026-68213,\nCVE-2026-68214, CVE-2026-68215, CVE-2026-68216, CVE-2026-68217,\nCVE-2026-68218, CVE-2026-68222, CVE-2026-68223, CVE-2026-68226,\nCVE-2026-68227, CVE-2026-68229, CVE-2026-68231, CVE-2026-68234,\nCVE-2026-68236, CVE-2026-68243, CVE-2026-68244, CVE-2026-68248,\nCVE-2026-68249, CVE-2026-68250, CVE-2026-68253, CVE-2026-68254,\nCVE-2026-68255, CVE-2026-68277, CVE-2026-68278, CVE-2026-68279,\nCVE-2026-68284, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68304, CVE-2026-68309,\nCVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322,\nCVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327,\nCVE-2026-68328, CVE-2026-68331, CVE-2026-68333, CVE-2026-68335,\nCVE-2026-68338, CVE-2026-68340, CVE-2026-68349, CVE-2026-68350,\nCVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354,\nCVE-2026-68355, CVE-2026-68357, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68367,\nCVE-2026-68368, CVE-2026-68369, CVE-2026-68370, CVE-2026-68373,\nCVE-2026-68376, CVE-2026-68377, CVE-2026-68388, CVE-2026-68395,\nCVE-2026-68397, CVE-2026-68398, CVE-2026-68399, CVE-2026-68402,\nCVE-2026-68403, CVE-2026-68405, CVE-2026-68406, CVE-2026-68410,\nCVE-2026-68411, CVE-2026-68413, CVE-2026-68414, CVE-2026-68417,\nCVE-2026-68422, CVE-2026-68425, CVE-2026-68428, CVE-2026-68430,\nCVE-2026-68431, CVE-2026-68432, CVE-2026-68433, CVE-2026-68444,\nCVE-2026-68446, CVE-2026-68449, CVE-2026-68450, CVE-2026-68451,\nCVE-2026-68452, CVE-2026-68456, CVE-2026-68459, CVE-2026-68460,\nCVE-2026-68461, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469,\nCVE-2026-68474, CVE-2026-68475, CVE-2026-68476, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72004,\nCVE-2026-72005, CVE-2026-72010, CVE-2026-72013, CVE-2026-72014,\nCVE-2026-72015, CVE-2026-72019, CVE-2026-72020, CVE-2026-72021,\nCVE-2026-72022, CVE-2026-72023, CVE-2026-72024, CVE-2026-72025,\nCVE-2026-72033, CVE-2026-72035, CVE-2026-72036, CVE-2026-72038,\nCVE-2026-72039, CVE-2026-72041, CVE-2026-72045, CVE-2026-72047,\nCVE-2026-72048, CVE-2026-72049, CVE-2026-72051, CVE-2026-72052,\nCVE-2026-72053, CVE-2026-72054, CVE-2026-72055, CVE-2026-72056,\nCVE-2026-72057, CVE-2026-72058, CVE-2026-72061, CVE-2026-72063,\nCVE-2026-72065, CVE-2026-72066, CVE-2026-72067, CVE-2026-72068,\nCVE-2026-72069, CVE-2026-72070, CVE-2026-72073, CVE-2026-72074,\nCVE-2026-72076, CVE-2026-72077, CVE-2026-72078, CVE-2026-72079,\nCVE-2026-72081, CVE-2026-72082, CVE-2026-72083, CVE-2026-72084,\nCVE-2026-72085, CVE-2026-72086, CVE-2026-72087, CVE-2026-72088,\nCVE-2026-72096, CVE-2026-72099, CVE-2026-72102, CVE-2026-72105,\nCVE-2026-72107, CVE-2026-72108, CVE-2026-72109, CVE-2026-72110,\nCVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116,\nCVE-2026-72117, CVE-2026-72118, CVE-2026-72119, CVE-2026-72120,\nCVE-2026-72121, CVE-2026-72122, CVE-2026-72123, CVE-2026-72124,\nCVE-2026-72125, CVE-2026-72126, CVE-2026-72129, CVE-2026-72133,\nCVE-2026-72135, CVE-2026-72136, CVE-2026-72138, CVE-2026-72140,\nCVE-2026-72142, CVE-2026-72146, CVE-2026-72148, CVE-2026-72152,\nCVE-2026-72153, CVE-2026-72155, CVE-2026-72157, CVE-2026-72159,\nCVE-2026-72160, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165,\nCVE-2026-72166, CVE-2026-72167, CVE-2026-72170, CVE-2026-72171,\nCVE-2026-72181, CVE-2026-72182, CVE-2026-72191, CVE-2026-72192,\nCVE-2026-72193, CVE-2026-72194, CVE-2026-72195, CVE-2026-72197,\nCVE-2026-72215, CVE-2026-72216, CVE-2026-72218, CVE-2026-72219,\nCVE-2026-72223, CVE-2026-72224, CVE-2026-72225, CVE-2026-72226,\nCVE-2026-72228, CVE-2026-72229, CVE-2026-72230, CVE-2026-72231,\nCVE-2026-72232, CVE-2026-72233, CVE-2026-72234, CVE-2026-72235,\nCVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72242,\nCVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72251,\nCVE-2026-72252, CVE-2026-72253, CVE-2026-72255, CVE-2026-72256,\nCVE-2026-72260, CVE-2026-72264, CVE-2026-72265, CVE-2026-72267,\nCVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,\nCVE-2026-72272, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,\nCVE-2026-72282, CVE-2026-72289, CVE-2026-72296, CVE-2026-72297,\nCVE-2026-72298, CVE-2026-72299, CVE-2026-72305, CVE-2026-72306,\nCVE-2026-72307, CVE-2026-72308, CVE-2026-72310, CVE-2026-72314,\nCVE-2026-72316, CVE-2026-72319, CVE-2026-72322, CVE-2026-72323,\nCVE-2026-72326, CVE-2026-72339, CVE-2026-72347, CVE-2026-72348,\nCVE-2026-72349, CVE-2026-72350, CVE-2026-72351, CVE-2026-72371,\nCVE-2026-72374, CVE-2026-72378, CVE-2026-72389, CVE-2026-72392,\nCVE-2026-72396, CVE-2026-72400, CVE-2026-72406, CVE-2026-72409,\nCVE-2026-72414, CVE-2026-72418, CVE-2026-72421, CVE-2026-72422,\nCVE-2026-72428, CVE-2026-72433, CVE-2026-72435, CVE-2026-72441,\nCVE-2026-72447, CVE-2026-72448, CVE-2026-72450, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72466, CVE-2026-72476, CVE-2026-72479,\nCVE-2026-72481, CVE-2026-72483, CVE-2026-72484, CVE-2026-72489,\nCVE-2026-72491, CVE-2026-72492, CVE-2026-72502, CVE-2026-74255,\nCVE-2026-74256, CVE-2026-74262, CVE-2026-74265, CVE-2026-74267,\nCVE-2026-74268, CVE-2026-74276, CVE-2026-74279, CVE-2026-74280,\nCVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284,\nCVE-2026-74287, CVE-2026-74288, CVE-2026-74292, CVE-2026-74293,\nCVE-2026-74295, CVE-2026-74297, CVE-2026-74305, CVE-2026-74312,\nCVE-2026-74313, CVE-2026-74320, CVE-2026-74321, CVE-2026-74327,\nCVE-2026-74329, CVE-2026-74330, CVE-2026-74331, CVE-2026-74339,\nCVE-2026-74340, CVE-2026-74346, CVE-2026-74348, CVE-2026-74349,\nCVE-2026-74351, CVE-2026-74359, CVE-2026-74363, CVE-2026-74376,\nCVE-2026-74378, CVE-2026-74379, CVE-2026-74382, CVE-2026-74384,\nCVE-2026-74390, CVE-2026-74394, CVE-2026-74395, CVE-2026-74398,\nCVE-2026-74399, CVE-2026-74402, CVE-2026-74408, CVE-2026-74410,\nCVE-2026-74416, CVE-2026-74424, CVE-2026-74426, CVE-2026-74427,\nCVE-2026-74436, CVE-2026-74438, CVE-2026-74443, CVE-2026-74444,\nCVE-2026-74453, CVE-2026-74455, CVE-2026-74456, CVE-2026-74457,\nCVE-2026-74458, CVE-2026-74459, CVE-2026-74460, CVE-2026-74461,\nCVE-2026-74463, CVE-2026-74464, CVE-2026-74465, CVE-2026-74467,\nCVE-2026-74468, CVE-2026-74469, CVE-2026-74470, CVE-2026-74471,\nCVE-2026-74473, CVE-2026-74475, CVE-2026-74478, CVE-2026-74479,\nCVE-2026-74480, CVE-2026-74481, CVE-2026-74482, CVE-2026-74485,\nCVE-2026-74487, CVE-2026-74488, CVE-2026-74490, CVE-2026-74492,\nCVE-2026-74493, CVE-2026-74494, CVE-2026-74495, CVE-2026-74496,\nCVE-2026-74497, CVE-2026-74498, CVE-2026-74499, CVE-2026-74505,\nCVE-2026-74507, CVE-2026-74508, CVE-2026-74512, CVE-2026-74518,\nCVE-2026-74519, CVE-2026-74523, CVE-2026-74525, CVE-2026-74540,\nCVE-2026-74546, CVE-2026-74547, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74556, CVE-2026-74557, CVE-2026-74563, CVE-2026-74564,\nCVE-2026-74566, CVE-2026-74567, CVE-2026-74569, CVE-2026-74575,\nCVE-2026-74577, CVE-2026-74578, CVE-2026-74579, CVE-2026-74580,\nCVE-2026-74581, CVE-2026-74582, CVE-2026-74583, CVE-2026-74584,\nCVE-2026-74585, CVE-2026-74586, CVE-2026-74587, CVE-2026-74588,\nCVE-2026-74589, CVE-2026-74594, CVE-2026-74595, CVE-2026-74597,\nCVE-2026-74598, CVE-2026-74599, CVE-2026-74601, CVE-2026-74604,\nCVE-2026-74609, CVE-2026-74613, CVE-2026-74614, CVE-2026-74615,\nCVE-2026-74616, CVE-2026-74620, CVE-2026-74621, CVE-2026-74622,\nCVE-2026-74623, CVE-2026-74625, CVE-2026-74626, CVE-2026-74628,\nCVE-2026-74630, CVE-2026-74631, CVE-2026-74632, CVE-2026-74635,\nCVE-2026-74636, CVE-2026-74637, CVE-2026-74641, CVE-2026-74647,\nCVE-2026-74648, CVE-2026-74649, CVE-2026-74650, CVE-2026-74651,\nCVE-2026-74654, CVE-2026-74656, CVE-2026-74657, CVE-2026-74658,\nCVE-2026-74659, CVE-2026-74660, CVE-2026-74662, CVE-2026-74663,\nCVE-2026-74664, CVE-2026-74666, CVE-2026-74667, CVE-2026-74668,\nCVE-2026-74669, CVE-2026-74671, CVE-2026-74673, CVE-2026-74675,\nCVE-2026-74676, CVE-2026-74679, CVE-2026-74680, CVE-2026-74682,\nCVE-2026-74683, CVE-2026-74688, CVE-2026-74691, CVE-2026-74692,\nCVE-2026-74693, CVE-2026-74694, CVE-2026-74696, CVE-2026-74697,\nCVE-2026-74701, CVE-2026-74704, CVE-2026-74705, CVE-2026-74717,\nCVE-2026-74719, CVE-2026-74720, CVE-2026-74726, CVE-2026-74730,\nCVE-2026-74737, CVE-2026-74743, CVE-2026-74746, CVE-2026-74748,\nCVE-2026-80527, CVE-2026-80528, CVE-2026-80534, CVE-2026-80536,\nCVE-2026-80540, CVE-2026-80541, CVE-2026-80547, CVE-2026-80548,\nCVE-2026-80550, CVE-2026-80552, CVE-2026-80553, CVE-2026-80555,\nCVE-2026-80557, CVE-2026-80558, CVE-2026-80559, CVE-2026-80560,\nCVE-2026-80561, CVE-2026-80562, CVE-2026-80565, CVE-2026-80567,\nCVE-2026-80568, CVE-2026-80569, CVE-2026-80570, CVE-2026-80573,\nCVE-2026-80574, CVE-2026-80583, CVE-2026-80584, CVE-2026-80586,\nCVE-2026-80587, CVE-2026-80590, CVE-2026-80591, CVE-2026-80593,\nCVE-2026-80594, CVE-2026-80595, CVE-2026-80597, CVE-2026-80598,\nCVE-2026-80599, CVE-2026-80600, CVE-2026-80601, CVE-2026-80603,\nCVE-2026-80605, CVE-2026-80609, CVE-2026-80613, CVE-2026-80619,\nCVE-2026-80622, CVE-2026-80626, CVE-2026-80627, CVE-2026-80630,\nCVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,\nCVE-2026-80649, CVE-2026-80652, CVE-2026-80659, CVE-2026-80664,\nCVE-2026-80671, CVE-2026-80677, CVE-2026-80678, CVE-2026-80679,\nCVE-2026-80680, CVE-2026-80681, CVE-2026-80689, CVE-2026-80706,\nCVE-2026-80707, CVE-2026-80708, CVE-2026-80714, CVE-2026-80715,\nCVE-2026-80716, CVE-2026-80717, CVE-2026-80718, CVE-2026-80722,\nCVE-2026-80731, CVE-2026-80732, CVE-2026-80733, CVE-2026-80737,\nCVE-2026-80742, CVE-2026-80743, CVE-2026-80744, CVE-2026-80752,\nCVE-2026-80754, CVE-2026-80756, CVE-2026-80757, CVE-2026-80765,\nCVE-2026-80766, CVE-2026-80767, CVE-2026-80768, CVE-2026-80781,\nCVE-2026-80782, CVE-2026-80783, CVE-2026-80788, CVE-2026-80789,\nCVE-2026-80790, CVE-2026-80792, CVE-2026-80793, CVE-2026-80794,\nCVE-2026-80795, CVE-2026-80796, CVE-2026-80797, CVE-2026-80798,\nCVE-2026-80799, CVE-2026-80800, CVE-2026-80801, CVE-2026-80802,\nCVE-2026-80803, CVE-2026-80805, CVE-2026-80806, CVE-2026-80807,\nCVE-2026-80808, CVE-2026-80809, CVE-2026-80812, CVE-2026-80814,\nCVE-2026-80819, CVE-2026-80823, CVE-2026-80824, CVE-2026-80826,\nCVE-2026-80827, CVE-2026-80828, CVE-2026-80829, CVE-2026-80830,\nCVE-2026-80831, CVE-2026-80832, CVE-2026-80833, CVE-2026-80834,\nCVE-2026-80840, CVE-2026-80842, CVE-2026-80843, CVE-2026-80844,\nCVE-2026-80846, CVE-2026-80848, CVE-2026-80854, CVE-2026-80855,\nCVE-2026-80856, CVE-2026-80863, CVE-2026-80867, CVE-2026-80875,\nCVE-2026-80876, CVE-2026-80877, CVE-2026-80879, CVE-2026-80880,\nCVE-2026-80881, CVE-2026-80886, CVE-2026-80888, CVE-2026-80890,\nCVE-2026-80902, CVE-2026-80906, CVE-2026-80908, CVE-2026-80909,\nCVE-2026-80910, CVE-2026-80912, CVE-2026-80913, CVE-2026-80916,\nCVE-2026-80917, CVE-2026-80918, CVE-2026-80921, CVE-2026-80923,\nCVE-2026-80928, CVE-2026-80930, CVE-2026-80931, CVE-2026-80932,\nCVE-2026-80938, CVE-2026-80941, CVE-2026-80944, CVE-2026-80949,\nCVE-2026-80951, CVE-2026-80952, CVE-2026-80963, CVE-2026-80964,\nCVE-2026-80965, CVE-2026-80966, CVE-2026-80967, CVE-2026-80968,\nCVE-2026-80969, CVE-2026-80971, CVE-2026-80972, CVE-2026-80973,\nCVE-2026-80976, CVE-2026-80977, CVE-2026-80978, CVE-2026-80983,\nCVE-2026-80987, CVE-2026-80988, CVE-2026-80994, CVE-2026-81000,\nCVE-2026-81001, CVE-2026-81002, CVE-2026-81003, CVE-2026-81005,\nCVE-2026-81007, CVE-2026-81008, CVE-2026-81017, CVE-2026-89440,\nCVE-2026-89444, CVE-2026-89456, CVE-2026-89457, CVE-2026-89458,\nCVE-2026-89461, CVE-2026-89463, CVE-2026-89464, CVE-2026-89469,\nCVE-2026-89470, CVE-2026-89471, CVE-2026-89474, CVE-2026-89475,\nCVE-2026-89476, CVE-2026-89477, CVE-2026-89478, CVE-2026-89479,\nCVE-2026-89480, CVE-2026-89482, CVE-2026-89483, CVE-2026-89485,\nCVE-2026-89487, CVE-2026-89488, CVE-2026-89489, CVE-2026-89490,\nCVE-2026-89491, CVE-2026-89493, CVE-2026-89494, CVE-2026-89495,\nCVE-2026-89496, CVE-2026-89497, CVE-2026-89498, CVE-2026-89504,\nCVE-2026-89508, CVE-2026-89510, CVE-2026-89511, CVE-2026-89512,\nCVE-2026-89515, CVE-2026-89524, CVE-2026-89525, CVE-2026-89532,\nCVE-2026-89533, CVE-2026-89538, CVE-2026-89540, CVE-2026-89541,\nCVE-2026-89542, CVE-2026-89548, CVE-2026-89549, CVE-2026-89551,\nCVE-2026-89554, CVE-2026-89555, CVE-2026-89557, CVE-2026-89559,\nCVE-2026-89560, CVE-2026-89562, CVE-2026-89563, CVE-2026-89569,\nCVE-2026-89573, CVE-2026-89575, CVE-2026-89576, CVE-2026-89582,\nCVE-2026-89585, CVE-2026-89586, CVE-2026-89594, CVE-2026-89595,\nCVE-2026-89596, CVE-2026-89597, CVE-2026-89599, CVE-2026-89605,\nCVE-2026-89606, CVE-2026-89607, CVE-2026-89608, CVE-2026-89609,\nCVE-2026-89615, CVE-2026-89616, CVE-2026-89617, CVE-2026-89621,\nCVE-2026-89626, CVE-2026-89627, CVE-2026-89628, CVE-2026-89643,\nCVE-2026-89649, CVE-2026-89650, CVE-2026-89653, CVE-2026-89655,\nCVE-2026-89656, CVE-2026-89662, CVE-2026-89663, CVE-2026-89665,\nCVE-2026-89669, CVE-2026-89673, CVE-2026-89674, CVE-2026-89684,\nCVE-2026-89694, CVE-2026-89696, CVE-2026-89697, CVE-2026-89699,\nCVE-2026-89704, CVE-2026-89706, CVE-2026-89710, CVE-2026-89711,\nCVE-2026-89712, CVE-2026-89720, CVE-2026-89723, CVE-2026-89724,\nCVE-2026-89725, CVE-2026-89726, CVE-2026-89729, CVE-2026-89730,\nCVE-2026-89732, CVE-2026-89733, CVE-2026-89736, CVE-2026-89741,\nCVE-2026-89742, CVE-2026-89749, CVE-2026-89752, CVE-2026-89753,\nCVE-2026-89765, CVE-2026-89774, CVE-2026-89777, CVE-2026-89778,\nCVE-2026-89779, CVE-2026-89780, CVE-2026-89781, CVE-2026-89782,\nCVE-2026-89783, CVE-2026-89784, CVE-2026-89785, CVE-2026-89786,\nCVE-2026-89787, CVE-2026-89789, CVE-2026-89792, CVE-2026-89796,\nCVE-2026-89816, CVE-2026-89817, CVE-2026-89821, CVE-2026-89823,\nCVE-2026-89843, CVE-2026-89845, CVE-2026-89846, CVE-2026-89847,\nCVE-2026-89849, CVE-2026-89850, CVE-2026-89851, CVE-2026-89852,\nCVE-2026-89853, CVE-2026-89854, CVE-2026-89855, CVE-2026-89856,\nCVE-2026-89858, CVE-2026-89861, CVE-2026-89863, CVE-2026-89864,\nCVE-2026-89865, CVE-2026-89871, CVE-2026-89872, CVE-2026-89876,\nCVE-2026-89878, CVE-2026-89879, CVE-2026-89880, CVE-2026-89881,\nCVE-2026-89883, CVE-2026-89887, CVE-2026-89888, CVE-2026-89890,\nCVE-2026-89891, CVE-2026-89892, CVE-2026-89893, CVE-2026-89894,\nCVE-2026-89895, CVE-2026-89896, CVE-2026-89897, CVE-2026-89901,\nCVE-2026-89923, CVE-2026-89924, CVE-2026-89925, CVE-2026-89926,\nCVE-2026-89927, CVE-2026-89930, CVE-2026-89932, CVE-2026-89936,\nCVE-2026-89937, CVE-2026-89939, CVE-2026-89945, CVE-2026-89946,\nCVE-2026-89947, CVE-2026-89948, CVE-2026-89949, CVE-2026-89951,\nCVE-2026-89952, CVE-2026-89953, CVE-2026-89954, CVE-2026-89964,\nCVE-2026-89965, CVE-2026-89968, CVE-2026-89969, CVE-2026-89973,\nCVE-2026-89979, CVE-2026-89982, CVE-2026-89983, CVE-2026-89984,\nCVE-2026-89989, CVE-2026-89993, CVE-2026-89997, CVE-2026-89999,\nCVE-2026-90000, CVE-2026-90007, CVE-2026-90011, CVE-2026-90015,\nCVE-2026-90017, CVE-2026-90018, CVE-2026-90019, CVE-2026-90020,\nCVE-2026-90025, CVE-2026-90031, CVE-2026-90032, CVE-2026-90033,\nCVE-2026-90034, CVE-2026-90049, CVE-2026-90053, CVE-2026-90054,\nCVE-2026-90055, CVE-2026-90056, CVE-2026-90058, CVE-2026-90062,\nCVE-2026-90063, CVE-2026-90067, CVE-2026-90068, CVE-2026-90070,\nCVE-2026-90071, CVE-2026-90072, CVE-2026-90073, CVE-2026-90074,\nCVE-2026-90075, CVE-2026-90078, CVE-2026-90081, CVE-2026-90088,\nCVE-2026-90102, CVE-2026-90103, CVE-2026-90107, CVE-2026-90114,\nCVE-2026-90126, CVE-2026-90128, CVE-2026-90140, CVE-2026-90141,\nCVE-2026-90143, CVE-2026-90151, CVE-2026-90157, CVE-2026-90160,\nCVE-2026-90198, CVE-2026-90202, CVE-2026-90203, CVE-2026-90209,\nCVE-2026-90214, CVE-2026-90216, CVE-2026-90218, CVE-2026-90219,\nCVE-2026-90221, CVE-2026-90222, CVE-2026-90223, CVE-2026-90224,\nCVE-2026-90225, CVE-2026-90226, CVE-2026-90228, CVE-2026-90245,\nCVE-2026-90248, CVE-2026-90249, CVE-2026-90251, CVE-2026-90257,\nCVE-2026-90274, CVE-2026-90281, CVE-2026-90283, CVE-2026-90284,\nCVE-2026-90285, CVE-2026-90286, CVE-2026-90290, CVE-2026-90292,\nCVE-2026-90293, CVE-2026-90294, CVE-2026-90295, CVE-2026-90296,\nCVE-2026-90297, CVE-2026-90298, CVE-2026-90302, CVE-2026-90303,\nCVE-2026-90307, CVE-2026-90314, CVE-2026-90316, CVE-2026-90318,\nCVE-2026-90319, CVE-2026-90327, CVE-2026-90329, CVE-2026-90334,\nCVE-2026-90341, CVE-2026-90348, CVE-2026-90360, CVE-2026-90361,\nCVE-2026-90362, CVE-2026-90372, CVE-2026-90378, CVE-2026-90382,\nCVE-2026-90386, CVE-2026-90388, CVE-2026-90391, CVE-2026-90393,\nCVE-2026-90394, CVE-2026-90395, CVE-2026-90403, CVE-2026-90411,\nCVE-2026-90413, CVE-2026-90414, CVE-2026-90415, CVE-2026-90416,\nCVE-2026-90419, CVE-2026-90420, CVE-2026-90431, CVE-2026-90434,\nCVE-2026-90435, CVE-2026-92476, CVE-2026-92494, CVE-2026-92496,\nCVE-2026-92498, CVE-2026-92501, CVE-2026-92504, CVE-2026-92508,\nCVE-2026-92521, CVE-2026-92522, CVE-2026-92524, CVE-2026-93037,\nCVE-2026-93039, CVE-2026-93040, CVE-2026-93041, CVE-2026-93046,\nCVE-2026-93048, CVE-2026-93049, CVE-2026-93051, CVE-2026-93052,\nCVE-2026-93053, CVE-2026-93054, CVE-2026-93055, CVE-2026-93056,\nCVE-2026-93061, CVE-2026-93067, CVE-2026-93095, CVE-2026-93098,\nCVE-2026-93102, CVE-2026-93103, CVE-2026-93108, CVE-2026-93109,\nCVE-2026-93110, CVE-2026-93114, CVE-2026-93115, CVE-2026-93120,\nCVE-2026-93130, CVE-2026-93131, CVE-2026-93138, CVE-2026-93140,\nCVE-2026-93141, CVE-2026-93145, CVE-2026-93151, CVE-2026-93158,\nCVE-2026-93159, CVE-2026-93160, CVE-2026-93161, CVE-2026-93165,\nCVE-2026-93167, CVE-2026-93170, CVE-2026-93177, CVE-2026-93178,\nCVE-2026-93183, CVE-2026-93185, CVE-2026-93188, CVE-2026-93189,\nCVE-2026-93191, CVE-2026-93203, CVE-2026-93204, CVE-2026-93206,\nCVE-2026-93213, CVE-2026-93214, CVE-2026-93219, CVE-2026-93222,\nCVE-2026-93226, CVE-2026-93234, CVE-2026-93236, CVE-2026-93242,\nCVE-2026-93245, CVE-2026-93252, CVE-2026-93256, CVE-2026-93261,\nCVE-2026-93262, CVE-2026-93264, CVE-2026-93268, CVE-2026-93271,\nCVE-2026-93274, CVE-2026-93280, CVE-2026-93283, CVE-2026-93286,\nCVE-2026-93287, CVE-2026-93288, CVE-2026-93782, CVE-2026-93783,\nCVE-2026-93784, CVE-2026-93785, CVE-2026-93789, CVE-2026-93795,\nCVE-2026-93797, CVE-2026-93798, CVE-2026-93800, CVE-2026-93802,\nCVE-2026-93803, CVE-2026-93805, CVE-2026-93807, CVE-2026-93808,\nCVE-2026-93811, CVE-2026-93812, CVE-2026-93813, CVE-2026-93815,\nCVE-2026-93816, CVE-2026-93819, CVE-2026-93820, CVE-2026-93821,\nCVE-2026-93822, CVE-2026-93825, CVE-2026-93830, CVE-2026-97407,\nCVE-2026-97408, CVE-2026-97411, CVE-2026-97413, CVE-2026-97416,\nCVE-2026-97417, CVE-2026-97418, CVE-2026-97419, CVE-2026-97420,\nCVE-2026-97421, CVE-2026-97430, CVE-2026-97434, CVE-2026-97435,\nCVE-2026-97436, CVE-2026-97437, CVE-2026-97438, CVE-2026-97439,\nCVE-2026-97440, CVE-2026-97441, CVE-2026-97443, CVE-2026-97444,\nCVE-2026-97445, CVE-2026-97446, CVE-2026-97448, CVE-2026-97449,\nCVE-2026-97450, CVE-2026-97451, CVE-2026-97452, CVE-2026-97453,\nCVE-2026-97454, CVE-2026-97455, CVE-2026-97456, CVE-2026-97472,\nCVE-2026-97475, CVE-2026-97476, CVE-2026-97481, CVE-2026-97482,\nCVE-2026-97483, CVE-2026-97484, CVE-2026-97485, CVE-2026-97486,\nCVE-2026-97487, CVE-2026-97488, CVE-2026-97489, CVE-2026-97490,\nCVE-2026-97491, CVE-2026-97492, CVE-2026-97502, CVE-2026-97506,\nCVE-2026-97507, CVE-2026-97508, CVE-2026-97509, CVE-2026-97510,\nCVE-2026-97523, CVE-2026-97524, CVE-2026-97568, CVE-2026-97572,\nCVE-2026-97573, CVE-2026-97576, CVE-2026-97582, CVE-2026-97592,\nCVE-2026-97596, CVE-2026-97598, CVE-2026-97601, CVE-2026-97604,\nCVE-2026-97608, CVE-2026-97611, CVE-2026-97612, CVE-2026-97899,\nCVE-2026-97904, CVE-2026-97905, CVE-2026-97909, CVE-2026-97910,\nCVE-2026-97923, CVE-2026-97926, CVE-2026-97927, CVE-2026-97930,\nCVE-2026-97931, CVE-2026-97940, CVE-2026-97948, CVE-2026-97951,\nCVE-2026-97954, CVE-2026-97957, CVE-2026-97958, CVE-2026-97959,\nCVE-2026-97963, CVE-2026-97964, CVE-2026-97969, CVE-2026-97970,\nCVE-2026-97981, CVE-2026-97982, CVE-2026-97991, CVE-2026-97993,\nCVE-2026-97995, CVE-2026-97998, CVE-2026-98006, CVE-2026-98009,\nCVE-2026-98010, CVE-2026-98011, CVE-2026-98012, CVE-2026-98013,\nCVE-2026-98014, CVE-2026-98015, CVE-2026-98016, CVE-2026-98022,\nCVE-2026-98023, CVE-2026-98025, CVE-2026-98027, CVE-2026-98030,\nCVE-2026-98031, CVE-2026-98063, CVE-2026-98064, CVE-2026-98066,\nCVE-2026-98068, CVE-2026-98069, CVE-2026-98070, CVE-2026-98071,\nCVE-2026-98072, CVE-2026-98074, CVE-2026-98075, CVE-2026-98076,\nCVE-2026-98077, CVE-2026-98078, CVE-2026-98080, CVE-2026-98088,\nCVE-2026-98090, CVE-2026-98091, CVE-2026-98094, CVE-2026-98095,\nCVE-2026-98096, CVE-2026-98098, CVE-2026-98108, CVE-2026-98113,\nCVE-2026-98116, CVE-2026-98121, CVE-2026-98123, CVE-2026-98130,\nCVE-2026-98154, CVE-2026-98157, CVE-2026-98158, CVE-2026-98160,\nCVE-2026-98181, CVE-2026-98185, CVE-2026-98186, CVE-2026-98187,\nCVE-2026-98188, CVE-2026-98189, CVE-2026-98190, CVE-2026-98191,\nCVE-2026-98194, CVE-2026-98195, CVE-2026-98196, CVE-2026-98197,\nCVE-2026-98199, CVE-2026-98201, CVE-2026-98202, CVE-2026-98203,\nCVE-2026-98204, CVE-2026-98205, CVE-2026-98207, CVE-2026-98208,\nCVE-2026-98209, CVE-2026-98210, CVE-2026-98217, CVE-2026-98221,\nCVE-2026-98233, CVE-2026-98234, CVE-2026-98236, CVE-2026-98237,\nCVE-2026-98241, CVE-2026-98251, CVE-2026-98252, CVE-2026-98253,\nCVE-2026-98255, CVE-2026-98257, CVE-2026-98262, CVE-2026-98272,\nCVE-2026-98275, CVE-2026-98276, CVE-2026-98282, CVE-2026-98287,\nCVE-2026-98290, CVE-2026-98298, CVE-2026-98299, CVE-2026-98300,\nCVE-2026-98302, CVE-2026-98306, CVE-2026-98308, CVE-2026-98311,\nCVE-2026-98314, CVE-2026-98319, CVE-2026-98320, CVE-2026-98322,\nCVE-2026-98323, CVE-2026-98339, CVE-2026-98340, CVE-2026-98342,\nCVE-2026-98343, CVE-2026-98344, CVE-2026-98345, CVE-2026-98347,\nCVE-2026-98348, CVE-2026-98349, CVE-2026-98351, CVE-2026-98352,\nCVE-2026-98354, CVE-2026-98357, CVE-2026-98358, CVE-2026-98362,\nCVE-2026-98363, CVE-2026-98367, CVE-2026-98369, CVE-2026-98370,\nCVE-2026-98374, CVE-2026-98379, CVE-2026-98380, CVE-2026-98381,\nCVE-2026-98383, CVE-2026-98398, CVE-2026-98404, CVE-2026-98406,\nCVE-2026-98407, CVE-2026-98413, CVE-2026-98416, CVE-2026-98417,\nCVE-2026-98419, CVE-2026-98422, CVE-2026-98426, CVE-2026-98433,\nCVE-2026-98455, CVE-2026-98457, CVE-2026-98460, CVE-2026-98461,\nCVE-2026-98476, CVE-2026-98479, CVE-2026-98481, CVE-2026-98482,\nCVE-2026-98483, CVE-2026-98485, CVE-2026-98488, CVE-2026-98489,\nCVE-2026-98491, CVE-2026-98494, CVE-2026-98495, CVE-2026-98498,\nCVE-2026-98499, CVE-2026-98501, CVE-2026-98511, CVE-2026-98514,\nCVE-2026-98515, CVE-2026-98516, CVE-2026-98524, CVE-2026-98526,\nCVE-2026-98527, CVE-2026-98529, CVE-2026-98531, CVE-2026-98532,\nCVE-2026-98535, CVE-2026-98536, CVE-2026-98537, CVE-2026-98541,\nCVE-2026-98547, CVE-2026-98548, CVE-2026-98550, CVE-2026-98553,\nCVE-2026-98554, CVE-2026-98555, CVE-2026-98559, CVE-2026-98567,\nCVE-2026-98569, CVE-2026-98573, CVE-2026-98575, CVE-2026-98576,\nCVE-2026-98577, CVE-2026-98578, CVE-2026-98579, CVE-2026-98580,\nCVE-2026-98581, CVE-2026-98582, CVE-2026-98583, CVE-2026-98586,\nCVE-2026-98588, CVE-2026-98590, CVE-2026-98593, CVE-2026-98594,\nCVE-2026-98597, CVE-2026-98602, CVE-2026-98606, CVE-2026-98607,\nCVE-2026-98608, CVE-2026-98609, CVE-2026-98610, CVE-2026-98612,\nCVE-2026-98614, CVE-2026-98621, CVE-2026-98622, CVE-2026-98623,\nCVE-2026-98624, CVE-2026-98625, CVE-2026-98626, CVE-2026-98631,\nCVE-2026-98636, CVE-2026-98640, CVE-2026-98643, CVE-2026-98644,\nCVE-2026-98647, CVE-2026-98872, CVE-2026-98873, CVE-2026-98876,\nCVE-2026-98877, CVE-2026-98879, CVE-2026-98881, CVE-2026-98884,\nCVE-2026-98885, CVE-2026-98886, CVE-2026-98887, CVE-2026-98888,\nCVE-2026-98889, CVE-2026-98890, CVE-2026-98891, CVE-2026-98892,\nCVE-2026-98893, CVE-2026-98896, CVE-2026-98898, CVE-2026-98899,\nCVE-2026-98900, CVE-2026-98902, CVE-2026-98907, CVE-2026-98909,\nCVE-2026-98911, CVE-2026-98912)\n","status":"published","published":"2026-11-03T11:04:01Z","modified":"2026-11-09T12:53:08.826264984Z","updated_at":"2026-11-07T01:56:36.654634Z"},{"id":"USN-9003-1","title":"linux-nvidia-7.0, linux-nvidia-bos vulnerabilities","description":"It was discovered that some AMD processors did not properly perform Reverse\nMap Table (RMP) checks when the IOMMU accessed certain host buffers. A\nlocal attacker with hypervisor access could possibly use this to trigger an\nout-of-bounds condition and compromise the integrity of SEV-SNP guest\nmemory. (CVE-2023-20585)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - Handshake API;\n  - ARM32 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Android drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - DRBD Distributed Replicated Block Device drivers;\n  - Rados block device (RBD) driver;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Cdrom driver;\n  - Character device driver;\n  - TPM device driver;\n  - Data acquisition framework and drivers;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - Arm Firmware Framework for ARMv8-A(FFA);\n  - ARM SCMI message protocol;\n  - Intel Stratix 10 firmware drivers;\n  - FPGA Framework;\n  - GPIB drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - Intel Trace Hub HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - IIO ADC drivers;\n  - IIO Magnetometer sensors drivers;\n  - InfiniBand drivers;\n  - Input Device (Miscellaneous) drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - LED subsystem;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Intel Management Engine Interface driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PCI subsystem;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - MediaTek PM domains;\n  - Power supply drivers;\n  - PTP clock framework;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - Reset controller framework;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - Xilinx SoC drivers;\n  - SoundWire subsystem;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Media Oriented Systems Transport (MOST) driver;\n  - NVIDIA Tegra embedded controller (NVEC) staging driver;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB DSL drivers;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - AFS file system;\n  - File systems infrastructure;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Journaling layer for block devices (JBD2);\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Overlay file system;\n  - Proc file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - File system encryption (fscrypt);\n  - MAC80211 subsystem;\n  - IPv4 networking;\n  - Live Update Orchestrator (LUO);\n  - Mellanox drivers;\n  - Networking core;\n  - Sun RPC protocol;\n  - Memory Management;\n  - Media input infrastructure;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - Wireless networking;\n  - IP tunnels definitions;\n  - Netfilter;\n  - Network traffic control;\n  - SCTP protocol;\n  - TCP network protocol;\n  - XFRM subsystem;\n  - RDMA verbs API;\n  - User-space API (UAPI);\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel CPU control infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - Kexec HandOver (KHO);\n  - Locking primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Codetag library;\n  - Resizable hashtable library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - Logical Link layer;\n  - IEEE 802.15.4 subsystem;\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - Packet sampling (psample);\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - RxRPC session sockets;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - X.25 network layer;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Landlock security;\n  - SELinux security module;\n  - ALSA framework;\n  - HD-audio driver;\n  - AMD SoC Alsa drivers;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - QCOM ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - NVIDIA Tegra ASoC drivers;\n  - USB sound devices;\n  - Perf tools;\n  - KVM subsystem;\n(CVE-2026-64349, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533,\nCVE-2026-64534, CVE-2026-64535, CVE-2026-64537, CVE-2026-64538,\nCVE-2026-64539, CVE-2026-64540, CVE-2026-64541, CVE-2026-64542,\nCVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,\nCVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,\nCVE-2026-64551, CVE-2026-64552, CVE-2026-64553, CVE-2026-64554,\nCVE-2026-64555, CVE-2026-64557, CVE-2026-64558, CVE-2026-64559,\nCVE-2026-64560, CVE-2026-64561, CVE-2026-64562, CVE-2026-64563,\nCVE-2026-64564, CVE-2026-64565, CVE-2026-64566, CVE-2026-64567,\nCVE-2026-64568, CVE-2026-64569, CVE-2026-64570, CVE-2026-64571,\nCVE-2026-64572, CVE-2026-64573, CVE-2026-64574, CVE-2026-64575,\nCVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64579,\nCVE-2026-64580, CVE-2026-64581, CVE-2026-64582, CVE-2026-64583,\nCVE-2026-64584, CVE-2026-64585, CVE-2026-64586, CVE-2026-68081,\nCVE-2026-68082, CVE-2026-68083, CVE-2026-68093, CVE-2026-68095,\nCVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68099,\nCVE-2026-68100, CVE-2026-68104, CVE-2026-68105, CVE-2026-68106,\nCVE-2026-68107, CVE-2026-68108, CVE-2026-68109, CVE-2026-68110,\nCVE-2026-68111, CVE-2026-68112, CVE-2026-68113, CVE-2026-68114,\nCVE-2026-68115, CVE-2026-68116, CVE-2026-68117, CVE-2026-68118,\nCVE-2026-68119, CVE-2026-68120, CVE-2026-68121, CVE-2026-68122,\nCVE-2026-68123, CVE-2026-68124, CVE-2026-68125, CVE-2026-68126,\nCVE-2026-68127, CVE-2026-68128, CVE-2026-68129, CVE-2026-68130,\nCVE-2026-68131, CVE-2026-68132, CVE-2026-68133, CVE-2026-68134,\nCVE-2026-68135, CVE-2026-68136, CVE-2026-68137, CVE-2026-68138,\nCVE-2026-68139, CVE-2026-68140, CVE-2026-68141, CVE-2026-68142,\nCVE-2026-68143, CVE-2026-68144, CVE-2026-68145, CVE-2026-68146,\nCVE-2026-68147, CVE-2026-68148, CVE-2026-68149, CVE-2026-68150,\nCVE-2026-68151, CVE-2026-68152, CVE-2026-68153, CVE-2026-68154,\nCVE-2026-68155, CVE-2026-68156, CVE-2026-68157, CVE-2026-68158,\nCVE-2026-68159, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162,\nCVE-2026-68163, CVE-2026-68164, CVE-2026-68165, CVE-2026-68166,\nCVE-2026-68168, CVE-2026-68169, CVE-2026-68170, CVE-2026-68172,\nCVE-2026-68173, CVE-2026-68174, CVE-2026-68175, CVE-2026-68176,\nCVE-2026-68177, CVE-2026-68178, CVE-2026-68179, CVE-2026-68180,\nCVE-2026-68181, CVE-2026-68182, CVE-2026-68183, CVE-2026-68184,\nCVE-2026-68186, CVE-2026-68187, CVE-2026-68188, CVE-2026-68189,\nCVE-2026-68190, CVE-2026-68191, CVE-2026-68192, CVE-2026-68193,\nCVE-2026-68194, CVE-2026-68195, CVE-2026-68196, CVE-2026-68197,\nCVE-2026-68198, CVE-2026-68199, CVE-2026-68200, CVE-2026-68201,\nCVE-2026-68202, CVE-2026-68203, CVE-2026-68204, CVE-2026-68205,\nCVE-2026-68206, CVE-2026-68207, CVE-2026-68208, CVE-2026-68209,\nCVE-2026-68210, CVE-2026-68211, CVE-2026-68212, CVE-2026-68213,\nCVE-2026-68214, CVE-2026-68215, CVE-2026-68216, CVE-2026-68217,\nCVE-2026-68218, CVE-2026-68219, CVE-2026-68220, CVE-2026-68221,\nCVE-2026-68222, CVE-2026-68223, CVE-2026-68224, CVE-2026-68225,\nCVE-2026-68226, CVE-2026-68227, CVE-2026-68228, CVE-2026-68229,\nCVE-2026-68230, CVE-2026-68231, CVE-2026-68232, CVE-2026-68233,\nCVE-2026-68234, CVE-2026-68235, CVE-2026-68236, CVE-2026-68237,\nCVE-2026-68238, CVE-2026-68239, CVE-2026-68240, CVE-2026-68241,\nCVE-2026-68242, CVE-2026-68243, CVE-2026-68244, CVE-2026-68245,\nCVE-2026-68246, CVE-2026-68247, CVE-2026-68248, CVE-2026-68249,\nCVE-2026-68250, CVE-2026-68251, CVE-2026-68252, CVE-2026-68253,\nCVE-2026-68254, CVE-2026-68255, CVE-2026-68256, CVE-2026-68257,\nCVE-2026-68258, CVE-2026-68259, CVE-2026-68260, CVE-2026-68261,\nCVE-2026-68262, CVE-2026-68263, CVE-2026-68264, CVE-2026-68265,\nCVE-2026-68266, CVE-2026-68267, CVE-2026-68268, CVE-2026-68269,\nCVE-2026-68270, CVE-2026-68271, CVE-2026-68272, CVE-2026-68273,\nCVE-2026-68274, CVE-2026-68275, CVE-2026-68276, CVE-2026-68277,\nCVE-2026-68278, CVE-2026-68279, CVE-2026-68280, CVE-2026-68281,\nCVE-2026-68282, CVE-2026-68283, CVE-2026-68284, CVE-2026-68286,\nCVE-2026-68287, CVE-2026-68288, CVE-2026-68289, CVE-2026-68290,\nCVE-2026-68291, CVE-2026-68292, CVE-2026-68293, CVE-2026-68294,\nCVE-2026-68296, CVE-2026-68297, CVE-2026-68298, CVE-2026-68299,\nCVE-2026-68300, CVE-2026-68301, CVE-2026-68302, CVE-2026-68303,\nCVE-2026-68304, CVE-2026-68306, CVE-2026-68307, CVE-2026-68308,\nCVE-2026-68309, CVE-2026-68310, CVE-2026-68311, CVE-2026-68312,\nCVE-2026-68313, CVE-2026-68314, CVE-2026-68315, CVE-2026-68316,\nCVE-2026-68317, CVE-2026-68318, CVE-2026-68319, CVE-2026-68320,\nCVE-2026-68321, CVE-2026-68322, CVE-2026-68323, CVE-2026-68324,\nCVE-2026-68325, CVE-2026-68326, CVE-2026-68327, CVE-2026-68328,\nCVE-2026-68329, CVE-2026-68330, CVE-2026-68331, CVE-2026-68332,\nCVE-2026-68333, CVE-2026-68334, CVE-2026-68335, CVE-2026-68336,\nCVE-2026-68337, CVE-2026-68338, CVE-2026-68339, CVE-2026-68340,\nCVE-2026-68341, CVE-2026-68342, CVE-2026-68343, CVE-2026-68345,\nCVE-2026-68346, CVE-2026-68347, CVE-2026-68348, CVE-2026-68349,\nCVE-2026-68350, CVE-2026-68351, CVE-2026-68352, CVE-2026-68353,\nCVE-2026-68354, CVE-2026-68355, CVE-2026-68356, CVE-2026-68357,\nCVE-2026-68358, CVE-2026-68359, CVE-2026-68360, CVE-2026-68361,\nCVE-2026-68362, CVE-2026-68363, CVE-2026-68364, CVE-2026-68365,\nCVE-2026-68366, CVE-2026-68367, CVE-2026-68368, CVE-2026-68369,\nCVE-2026-68370, CVE-2026-68371, CVE-2026-68372, CVE-2026-68373,\nCVE-2026-68374, CVE-2026-68375, CVE-2026-68376, CVE-2026-68377,\nCVE-2026-68378, CVE-2026-68379, CVE-2026-68380, CVE-2026-68381,\nCVE-2026-68382, CVE-2026-68383, CVE-2026-68384, CVE-2026-68385,\nCVE-2026-68386, CVE-2026-68387, CVE-2026-68388, CVE-2026-68389,\nCVE-2026-68390, CVE-2026-68391, CVE-2026-68392, CVE-2026-68393,\nCVE-2026-68394, CVE-2026-68395, CVE-2026-68396, CVE-2026-68397,\nCVE-2026-68398, CVE-2026-68399, CVE-2026-68400, CVE-2026-68401,\nCVE-2026-68402, CVE-2026-68403, CVE-2026-68404, CVE-2026-68405,\nCVE-2026-68406, CVE-2026-68407, CVE-2026-68408, CVE-2026-68409,\nCVE-2026-68410, CVE-2026-68411, CVE-2026-68412, CVE-2026-68413,\nCVE-2026-68414, CVE-2026-68415, CVE-2026-68416, CVE-2026-68417,\nCVE-2026-68418, CVE-2026-68419, CVE-2026-68420, CVE-2026-68421,\nCVE-2026-68422, CVE-2026-68425, CVE-2026-68426, CVE-2026-68427,\nCVE-2026-68428, CVE-2026-68429, CVE-2026-68430, CVE-2026-68431,\nCVE-2026-68432, CVE-2026-68433, CVE-2026-68434, CVE-2026-68436,\nCVE-2026-68437, CVE-2026-68439, CVE-2026-68440, CVE-2026-68441,\nCVE-2026-68442, CVE-2026-68443, CVE-2026-68444, CVE-2026-68445,\nCVE-2026-68446, CVE-2026-68447, CVE-2026-68448, CVE-2026-68449,\nCVE-2026-68450, CVE-2026-68454, CVE-2026-68455, CVE-2026-68456,\nCVE-2026-68457, CVE-2026-68458, CVE-2026-68463, CVE-2026-68464,\nCVE-2026-68465, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469,\nCVE-2026-68470, CVE-2026-68471, CVE-2026-68472, CVE-2026-68473,\nCVE-2026-68474, CVE-2026-68475, CVE-2026-68476, CVE-2026-68477,\nCVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72003,\nCVE-2026-72004, CVE-2026-72005, CVE-2026-72006, CVE-2026-72007,\nCVE-2026-72008, CVE-2026-72009, CVE-2026-72010, CVE-2026-72011,\nCVE-2026-72012, CVE-2026-72013, CVE-2026-72014, CVE-2026-72015,\nCVE-2026-72016, CVE-2026-72017, CVE-2026-72018, CVE-2026-72019,\nCVE-2026-72020, CVE-2026-72021, CVE-2026-72022, CVE-2026-72023,\nCVE-2026-72024, CVE-2026-72025, CVE-2026-72026, CVE-2026-72027,\nCVE-2026-72028, CVE-2026-72029, CVE-2026-72030, CVE-2026-72031,\nCVE-2026-72032, CVE-2026-72033, CVE-2026-72034, CVE-2026-72035,\nCVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,\nCVE-2026-72040, CVE-2026-72041, CVE-2026-72042, CVE-2026-72045,\nCVE-2026-72046, CVE-2026-72047, CVE-2026-72048, CVE-2026-72049,\nCVE-2026-72050, CVE-2026-72051, CVE-2026-72052, CVE-2026-72053,\nCVE-2026-72054, CVE-2026-72055, CVE-2026-72056, CVE-2026-72057,\nCVE-2026-72058, CVE-2026-72059, CVE-2026-72060, CVE-2026-72061,\nCVE-2026-72062, CVE-2026-72063, CVE-2026-72064, CVE-2026-72065,\nCVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72069,\nCVE-2026-72070, CVE-2026-72071, CVE-2026-72072, CVE-2026-72073,\nCVE-2026-72074, CVE-2026-72075, CVE-2026-72076, CVE-2026-72077,\nCVE-2026-72078, CVE-2026-72079, CVE-2026-72080, CVE-2026-72081,\nCVE-2026-72082, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085,\nCVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,\nCVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093,\nCVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72098,\nCVE-2026-72099, CVE-2026-72100, CVE-2026-72101, CVE-2026-72102,\nCVE-2026-72103, CVE-2026-72104, CVE-2026-72105, CVE-2026-72106,\nCVE-2026-72107, CVE-2026-72108, CVE-2026-72109, CVE-2026-72110,\nCVE-2026-72111, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,\nCVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,\nCVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,\nCVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72127,\nCVE-2026-72128, CVE-2026-72129, CVE-2026-72130, CVE-2026-72131,\nCVE-2026-72132, CVE-2026-72133, CVE-2026-72134, CVE-2026-72135,\nCVE-2026-72136, CVE-2026-72137, CVE-2026-72138, CVE-2026-72139,\nCVE-2026-72140, CVE-2026-72141, CVE-2026-72142, CVE-2026-72143,\nCVE-2026-72144, CVE-2026-72146, CVE-2026-72147, CVE-2026-72148,\nCVE-2026-72149, CVE-2026-72150, CVE-2026-72151, CVE-2026-72152,\nCVE-2026-72153, CVE-2026-72154, CVE-2026-72155, CVE-2026-72156,\nCVE-2026-72157, CVE-2026-72158, CVE-2026-72159, CVE-2026-72160,\nCVE-2026-72161, CVE-2026-72162, CVE-2026-72163, CVE-2026-72164,\nCVE-2026-72165, CVE-2026-72166, CVE-2026-72167, CVE-2026-72168,\nCVE-2026-72169, CVE-2026-72170, CVE-2026-72171, CVE-2026-72172,\nCVE-2026-72173, CVE-2026-72174, CVE-2026-72175, CVE-2026-72176,\nCVE-2026-72177, CVE-2026-72178, CVE-2026-72179, CVE-2026-72180,\nCVE-2026-72181, CVE-2026-72182, CVE-2026-72183, CVE-2026-72191,\nCVE-2026-72192, CVE-2026-72193, CVE-2026-72194, CVE-2026-72195,\nCVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213,\nCVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72217,\nCVE-2026-72218, CVE-2026-72219, CVE-2026-72220, CVE-2026-72221,\nCVE-2026-72222, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,\nCVE-2026-72226, CVE-2026-72227, CVE-2026-72228, CVE-2026-72229,\nCVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233,\nCVE-2026-72234, CVE-2026-72235, CVE-2026-72236, CVE-2026-72237,\nCVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72242,\nCVE-2026-72243, CVE-2026-72244, CVE-2026-72245, CVE-2026-72247,\nCVE-2026-72248, CVE-2026-72249, CVE-2026-72250, CVE-2026-72251,\nCVE-2026-72252, CVE-2026-72253, CVE-2026-72254, CVE-2026-72255,\nCVE-2026-72256, CVE-2026-72257, CVE-2026-72258, CVE-2026-72259,\nCVE-2026-72260, CVE-2026-72261, CVE-2026-72262, CVE-2026-72263,\nCVE-2026-72264, CVE-2026-72265, CVE-2026-72266, CVE-2026-72267,\nCVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,\nCVE-2026-72272, CVE-2026-72273, CVE-2026-72274, CVE-2026-72275,\nCVE-2026-72276, CVE-2026-72277, CVE-2026-72278, CVE-2026-72279,\nCVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284,\nCVE-2026-72285, CVE-2026-72286, CVE-2026-72287, CVE-2026-72288,\nCVE-2026-72289, CVE-2026-72290, CVE-2026-72292, CVE-2026-72293,\nCVE-2026-72296, CVE-2026-72297, CVE-2026-72298, CVE-2026-72299,\nCVE-2026-72300, CVE-2026-72301, CVE-2026-72302, CVE-2026-72303,\nCVE-2026-72304, CVE-2026-72305, CVE-2026-72306, CVE-2026-72307,\nCVE-2026-72308, CVE-2026-72310, CVE-2026-72312, CVE-2026-72313,\nCVE-2026-72314, CVE-2026-72315, CVE-2026-72316, CVE-2026-72317,\nCVE-2026-72318, CVE-2026-72319, CVE-2026-72320, CVE-2026-72321,\nCVE-2026-72322, CVE-2026-72323, CVE-2026-72324, CVE-2026-72325,\nCVE-2026-72326, CVE-2026-72327, CVE-2026-72328, CVE-2026-72329,\nCVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333,\nCVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337,\nCVE-2026-72338, CVE-2026-72339, CVE-2026-72340, CVE-2026-72341,\nCVE-2026-72342, CVE-2026-72343, CVE-2026-72345, CVE-2026-72347,\nCVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351,\nCVE-2026-72352, CVE-2026-72355, CVE-2026-72356, CVE-2026-72357,\nCVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363,\nCVE-2026-72364, CVE-2026-72365, CVE-2026-72366, CVE-2026-72367,\nCVE-2026-72368, CVE-2026-72369, CVE-2026-72370, CVE-2026-72371,\nCVE-2026-72372, CVE-2026-72373, CVE-2026-72374, CVE-2026-72375,\nCVE-2026-72376, CVE-2026-72377, CVE-2026-72378, CVE-2026-72379,\nCVE-2026-72380, CVE-2026-72381, CVE-2026-72382, CVE-2026-72383,\nCVE-2026-72384, CVE-2026-72385, CVE-2026-72386, CVE-2026-72387,\nCVE-2026-72388, CVE-2026-72389, CVE-2026-72390, CVE-2026-72391,\nCVE-2026-72392, CVE-2026-72393, CVE-2026-72394, CVE-2026-72395,\nCVE-2026-72396, CVE-2026-72397, CVE-2026-72398, CVE-2026-72399,\nCVE-2026-72400, CVE-2026-72401, CVE-2026-72402, CVE-2026-72403,\nCVE-2026-72405, CVE-2026-72406, CVE-2026-72407, CVE-2026-72408,\nCVE-2026-72409, CVE-2026-72410, CVE-2026-72412, CVE-2026-72413,\nCVE-2026-72414, CVE-2026-72415, CVE-2026-72416, CVE-2026-72417,\nCVE-2026-72418, CVE-2026-72419, CVE-2026-72420, CVE-2026-72421,\nCVE-2026-72422, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425,\nCVE-2026-72427, CVE-2026-72428, CVE-2026-72429, CVE-2026-72430,\nCVE-2026-72431, CVE-2026-72433, CVE-2026-72434, CVE-2026-72435,\nCVE-2026-72436, CVE-2026-72437, CVE-2026-72438, CVE-2026-72439,\nCVE-2026-72440, CVE-2026-72441, CVE-2026-72442, CVE-2026-72443,\nCVE-2026-72444, CVE-2026-72445, CVE-2026-72446, CVE-2026-72447,\nCVE-2026-72448, CVE-2026-72449, CVE-2026-72450, CVE-2026-72451,\nCVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455,\nCVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459,\nCVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72463,\nCVE-2026-72464, CVE-2026-72466, CVE-2026-72467, CVE-2026-72468,\nCVE-2026-72469, CVE-2026-72470, CVE-2026-72471, CVE-2026-72472,\nCVE-2026-72473, CVE-2026-72474, CVE-2026-72475, CVE-2026-72476,\nCVE-2026-72477, CVE-2026-72478, CVE-2026-72479, CVE-2026-72480,\nCVE-2026-72481, CVE-2026-72482, CVE-2026-72483, CVE-2026-72484,\nCVE-2026-72485, CVE-2026-72486, CVE-2026-72487, CVE-2026-72488,\nCVE-2026-72489, CVE-2026-72491, CVE-2026-72492, CVE-2026-72493,\nCVE-2026-72494, CVE-2026-72495, CVE-2026-72496, CVE-2026-72498,\nCVE-2026-72499, CVE-2026-72500, CVE-2026-72501, CVE-2026-72502,\nCVE-2026-74255, CVE-2026-74256, CVE-2026-74257, CVE-2026-74258,\nCVE-2026-74260, CVE-2026-74261, CVE-2026-74262, CVE-2026-74263,\nCVE-2026-74264, CVE-2026-74265, CVE-2026-74266, CVE-2026-74267,\nCVE-2026-74268, CVE-2026-74269, CVE-2026-74270, CVE-2026-74271,\nCVE-2026-74272, CVE-2026-74273, CVE-2026-74274, CVE-2026-74276,\nCVE-2026-74277, CVE-2026-74278, CVE-2026-74279, CVE-2026-74280,\nCVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284,\nCVE-2026-74286, CVE-2026-74287, CVE-2026-74288, CVE-2026-74289,\nCVE-2026-74290, CVE-2026-74291, CVE-2026-74292, CVE-2026-74293,\nCVE-2026-74294, CVE-2026-74295, CVE-2026-74296, CVE-2026-74297,\nCVE-2026-74300, CVE-2026-74301, CVE-2026-74302, CVE-2026-74303,\nCVE-2026-74304, CVE-2026-74305, CVE-2026-74306, CVE-2026-74307,\nCVE-2026-74308, CVE-2026-74309, CVE-2026-74310, CVE-2026-74311,\nCVE-2026-74312, CVE-2026-74313, CVE-2026-74314, CVE-2026-74316,\nCVE-2026-74317, CVE-2026-74318, CVE-2026-74320, CVE-2026-74321,\nCVE-2026-74322, CVE-2026-74323, CVE-2026-74324, CVE-2026-74325,\nCVE-2026-74327, CVE-2026-74328, CVE-2026-74329, CVE-2026-74330,\nCVE-2026-74331, CVE-2026-74332, CVE-2026-74333, CVE-2026-74334,\nCVE-2026-74335, CVE-2026-74336, CVE-2026-74337, CVE-2026-74338,\nCVE-2026-74339, CVE-2026-74340, CVE-2026-74341, CVE-2026-74344,\nCVE-2026-74345, CVE-2026-74346, CVE-2026-74347, CVE-2026-74348,\nCVE-2026-74349, CVE-2026-74350, CVE-2026-74351, CVE-2026-74352,\nCVE-2026-74353, CVE-2026-74354, CVE-2026-74355, CVE-2026-74356,\nCVE-2026-74358, CVE-2026-74359, CVE-2026-74360, CVE-2026-74361,\nCVE-2026-74362, CVE-2026-74363, CVE-2026-74364, CVE-2026-74365,\nCVE-2026-74366, CVE-2026-74367, CVE-2026-74368, CVE-2026-74370,\nCVE-2026-74371, CVE-2026-74372, CVE-2026-74373, CVE-2026-74374,\nCVE-2026-74375, CVE-2026-74376, CVE-2026-74377, CVE-2026-74378,\nCVE-2026-74379, CVE-2026-74380, CVE-2026-74381, CVE-2026-74382,\nCVE-2026-74383, CVE-2026-74384, CVE-2026-74385, CVE-2026-74386,\nCVE-2026-74387, CVE-2026-74388, CVE-2026-74389, CVE-2026-74390,\nCVE-2026-74391, CVE-2026-74392, CVE-2026-74393, CVE-2026-74394,\nCVE-2026-74395, CVE-2026-74396, CVE-2026-74397, CVE-2026-74398,\nCVE-2026-74399, CVE-2026-74400, CVE-2026-74401, CVE-2026-74402,\nCVE-2026-74403, CVE-2026-74404, CVE-2026-74405, CVE-2026-74406,\nCVE-2026-74407, CVE-2026-74408, CVE-2026-74409, CVE-2026-74410,\nCVE-2026-74411, CVE-2026-74412, CVE-2026-74413, CVE-2026-74415,\nCVE-2026-74416, CVE-2026-74417, CVE-2026-74419, CVE-2026-74420,\nCVE-2026-74421, CVE-2026-74422, CVE-2026-74423, CVE-2026-74424,\nCVE-2026-74425, CVE-2026-74426, CVE-2026-74427, CVE-2026-74428,\nCVE-2026-74429, CVE-2026-74430, CVE-2026-74431, CVE-2026-74432,\nCVE-2026-74433, CVE-2026-74434, CVE-2026-74435, CVE-2026-74436,\nCVE-2026-74437, CVE-2026-74438, CVE-2026-74439, CVE-2026-80592,\nCVE-2026-80593, CVE-2026-80594, CVE-2026-80595, CVE-2026-80596,\nCVE-2026-80597, CVE-2026-80598, CVE-2026-80599, CVE-2026-80600,\nCVE-2026-80601, CVE-2026-80602, CVE-2026-80603, CVE-2026-80604,\nCVE-2026-80605, CVE-2026-80606, CVE-2026-80607, CVE-2026-80609,\nCVE-2026-80610, CVE-2026-80611, CVE-2026-80612, CVE-2026-80613,\nCVE-2026-80614, CVE-2026-80615, CVE-2026-80616, CVE-2026-80617,\nCVE-2026-80618, CVE-2026-80619, CVE-2026-80620, CVE-2026-80621,\nCVE-2026-80622, CVE-2026-80623, CVE-2026-80624, CVE-2026-80625,\nCVE-2026-80626, CVE-2026-80627, CVE-2026-80628, CVE-2026-80629,\nCVE-2026-80630, CVE-2026-80631, CVE-2026-80634, CVE-2026-80635,\nCVE-2026-80636, CVE-2026-80637, CVE-2026-80638, CVE-2026-80639,\nCVE-2026-80640, CVE-2026-80641, CVE-2026-80642, CVE-2026-80643,\nCVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,\nCVE-2026-80648, CVE-2026-80649, CVE-2026-80650, CVE-2026-80651,\nCVE-2026-80652, CVE-2026-80653, CVE-2026-80654, CVE-2026-80655,\nCVE-2026-80657, CVE-2026-80658, CVE-2026-80659, CVE-2026-80660,\nCVE-2026-80661, CVE-2026-80662, CVE-2026-80663, CVE-2026-80664,\nCVE-2026-80665, CVE-2026-80666, CVE-2026-80667, CVE-2026-80668,\nCVE-2026-80669, CVE-2026-80670, CVE-2026-80671, CVE-2026-80675,\nCVE-2026-80676, CVE-2026-80677, CVE-2026-80865, CVE-2026-80866,\nCVE-2026-80867, CVE-2026-80868, CVE-2026-80870, CVE-2026-80871,\nCVE-2026-80872, CVE-2026-80873, CVE-2026-80874, CVE-2026-80875,\nCVE-2026-80876, CVE-2026-80877, CVE-2026-80878, CVE-2026-80879,\nCVE-2026-80880, CVE-2026-80881, CVE-2026-80882, CVE-2026-80883,\nCVE-2026-80884, CVE-2026-80885, CVE-2026-80886, CVE-2026-89774,\nCVE-2026-92502)\n","status":"published","published":"2026-11-06T11:30:38Z","modified":"2026-11-09T12:50:26.504264599Z","updated_at":"2026-11-06T20:50:10.515878Z"}]}}